Vulnerabilities > CVE-2004-2116 - Unspecified vulnerability in Tinyserver 1.1
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN tinyserver
exploit available
Summary
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. (dot dot) in the URL.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | TinyServer 1.1 Directory Traversal. CVE-2004-2116. Remote exploit for windows platform |
| id | EDB-ID:23594 |
| last seen | 2016-02-02 |
| modified | 2004-01-24 |
| published | 2004-01-24 |
| reporter | Donato Ferrante |
| source | https://www.exploit-db.com/download/23594/ |
| title | tinyserver 1.1 - Directory Traversal |
References
- http://www.securityfocus.com/bid/9485
- http://www.osvdb.org/3708
- http://secunia.com/advisories/10707
- http://packetstormsecurity.com/files/129320/Tiny-Server-1.1.9-Arbitrary-File-Disclosure.html
- http://marc.info/?l=bugtraq&m=107496530806730&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99048
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14927
- http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt