VulnerabilityModified
CVE-2004-2121
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.
MEDIUM 5.0EPSS 3.05%
Does this matter?
Lower severity and a low EPSS score (3.05%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.05% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- borland software/web server for corel paradox
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=107497413413907&w=2
- http://securitytracker.com/id?1008840Exploit
- http://www.securityfocus.com/bid/9486Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14948
- http://marc.info/?l=bugtraq&m=107497413413907&w=2
- http://securitytracker.com/id?1008840Exploit
- http://www.securityfocus.com/bid/9486Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14948
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.