CVE-2001-0205

Description

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.

Affected products

• AOL / aol_server3.2 – 3.2

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=98148759123258&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=98168216003867&w=2
• MISChttp://www.securityfocus.com/bid/2343