Vulnerabilities > CVE-2002-1864 - Unspecified vulnerability in SWS Simple web Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
sws
metasploit
NVD
Published: 2002-12-31
Updated: 2008-09-05

Summary

Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.

Vulnerable Configurations

Part Description Count
Application
Sws
4

Metasploit

descriptionThis module exploits a directory traversal vulnerability found in Simple Web Server 2.3-RC1.
idMSF:AUXILIARY/SCANNER/HTTP/SIMPLE_WEBSERVER_TRAVERSAL
last seen2020-06-01
modified2019-03-05
published2013-02-06
references
reporterRapid7
sourcehttps://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/scanner/http/simple_webserver_traversal.rb
titleSimple Web Server 2.3-RC1 Directory Traversal

References