Vulnerabilities > CVE-2001-0561 - Unspecified vulnerability in Drummond Miles A1Stats 1.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 2 |
Exploit-Db
description Drummond Miles A1Stats 1.0 a1disp3.cgi Traversal Arbitrary File Read. CVE-2001-0561. Remote exploit for cgi platform id EDB-ID:20832 last seen 2016-02-02 modified 2001-05-07 published 2001-05-07 reporter neme-dhc source https://www.exploit-db.com/download/20832/ title Drummond Miles A1Stats 1.0 a1disp3.cgi Traversal Arbitrary File Read description Drummond Miles A1Stats 1.0 a1disp2.cgi Traversal Arbitrary File Read. CVE-2001-0561. Remote exploit for cgi platform id EDB-ID:20831 last seen 2016-02-02 modified 2001-05-07 published 2001-05-07 reporter neme-dhc source https://www.exploit-db.com/download/20831/ title Drummond Miles A1Stats 1.0 a1disp2.cgi Traversal Arbitrary File Read description Drummond Miles A1Stats 1.0 a1disp4.cgi Traversal Arbitrary File Read. CVE-2001-0561. Remote exploit for cgi platform id EDB-ID:20833 last seen 2016-02-02 modified 2001-05-07 published 2001-05-07 reporter neme-dhc source https://www.exploit-db.com/download/20833/ title Drummond Miles A1Stats 1.0 a1disp4.cgi Traversal Arbitrary File Read
Nessus
NASL family | CGI abuses |
NASL id | A1STATS.NASL |
description | The |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 10669 |
published | 2001-05-14 |
reporter | This script is Copyright (C) 2001-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/10669 |
title | A1Stats Multiple Script Traversal Arbitrary File Access |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html
- http://www.kb.cert.org/vuls/id/471691
- http://www.kb.cert.org/vuls/id/471691
- http://www.securityfocus.com/bid/2705
- http://www.securityfocus.com/bid/2705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6503
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6503