CVE

CVE-2002-1078

Date: (C)2002-10-04   (M)2023-12-22

Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

http://online.securityfocus.com/archive/1/284904

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0043.html

BID-5345

abyss-slash-directory-traversal(9721)