CVE-2001-1432: Path Traversal
Published Dec 29, 2001
·Updated
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Affected Software
7 affected components
Cherokee Cherokee HTTPD=0.2
Cherokee Cherokee HTTPD=0.1.6
Cherokee Cherokee HTTPD=0.2.6
Cherokee Cherokee HTTPD=0.2.5
Cherokee Cherokee HTTPD=0.1
Cherokee Cherokee HTTPD=0.2.7
Cherokee Cherokee HTTPD=0.1.5
Event History
Dec 29, 2001
CVE Published
05:00 AM
Mar 24, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1432?
CVE-2001-1432 is considered a high-severity vulnerability as it allows remote attackers to read arbitrary files on the server.
2
How do I fix CVE-2001-1432?
To fix CVE-2001-1432, users should upgrade their Cherokee Web Server to a version that has patched this vulnerability.
3
What versions of Cherokee Web Server are affected by CVE-2001-1432?
CVE-2001-1432 affects Cherokee Web Server versions 0.1, 0.1.5, 0.1.6, 0.2, 0.2.5, 0.2.6, and 0.2.7.
4
Can CVE-2001-1432 be exploited remotely?
Yes, CVE-2001-1432 can be exploited remotely through crafted URLs that include directory traversal sequences.
5
What type of attack is associated with CVE-2001-1432?
CVE-2001-1432 is primarily associated with directory traversal attacks, allowing unauthorized file access on the server.