First published: Wed Jul 11 2001(Updated: )
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
McAfee ASaP VirusScan | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1144 is considered a high severity vulnerability due to its potential to allow attackers to read sensitive files on a server.
To fix CVE-2001-1144, upgrade to a patched version of McAfee ASaP VirusScan Agent that has addressed the directory traversal issues.
CVE-2001-1144 affects users of McAfee ASaP VirusScan version 1.0.
In the context of CVE-2001-1144, a directory traversal vulnerability allows attackers to access files outside of the intended directories by manipulating the file path.
Yes, CVE-2001-1144 can be exploited remotely through crafted HTTP requests.