CVE-2001-1580: Medium severity Nombas Scriptease Webserver vulnerability

Published Dec 31, 2001

Updated

Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.

Affected Software

4 affected components

Nombas Scriptease Webserver=4.30b

Nombas Scriptease Webserver=4.30d

Novell NetWare FTP Server=5.1

Novell NetWare FTP Server=5.1-sp2a

Remediation

Patch Available

http://www.securityfocus.com/bid/3715

Event History

Dec 31, 2001

CVE Published

05:00 AM

Aug 5, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1580?

CVE-2001-1580 is categorized as a high severity vulnerability due to its potential to allow remote attackers to access arbitrary files.

How do I fix CVE-2001-1580?

To fix CVE-2001-1580, you should update to Nombas Scriptease Webserver version 4.30e or a later version, or ensure that Novell NetWare 5.1 is upgraded to at least SP3.

Who is affected by CVE-2001-1580?

CVE-2001-1580 affects users of Nombas Scriptease Webserver versions 4.30b and 4.30d, as well as Novell NetWare version 5.1 and 5.1 SP2a.

What type of vulnerability is CVE-2001-1580?

CVE-2001-1580 is a directory traversal vulnerability, enabling unauthorized file access through URL manipulation.

Is there a known exploit for CVE-2001-1580?

Yes, CVE-2001-1580 has known exploitation methods that utilize path traversal techniques in the query string.