CVE-2004-2121: Medium severity Borland Software Web Server For Corel Paradox vulnerability
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2121?
CVE-2004-2121 is considered a high severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2004-2121?
To fix CVE-2004-2121, upgrade to a patched version of the Borland Web Server later than 1.0b3.
What systems are affected by CVE-2004-2121?
CVE-2004-2121 affects Borland Web Server (BWS) 1.0b3 and earlier versions.
What type of attacks can be executed via CVE-2004-2121?
CVE-2004-2121 allows attackers to exploit directory traversal vulnerabilities to read and download arbitrary files.
What are multi-dot sequences related to CVE-2004-2121?
Multi-dot sequences like '......' allow attackers to navigate up the file system hierarchy, compromising system security in CVE-2004-2121.