Description

Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.

Remediation

References

CVE-2004-0173

Related Vulnerabilities

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29459)

WordPress Plugin Safe Editor Unspecified Vulnerability (1.1)

Drupal Incorrect Authorization Vulnerability (CVE-2017-6377)

MySQL CVE-2021-2180 Vulnerability (CVE-2021-2180)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Multiple Vulnerabilities (5.2.3)

Severity

Medium

Classification

CVE-2004-0173

Tags

Missing Update Known Vulnerabilities