CVEvulnerability

CVE-2002-0661

7.5 HIGH Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \ (backslash) characters.

Affected configurations

• apache http server 2.0 • apache http server 2.0.28 • apache http server 2.0.32 • apache http server 2.0.34 • apache http server 2.0.35 • apache http server 2.0.36 • apache http server 2.0.37 • apache http server 2.0.38 • apache http server 2.0.39

Related

Referenced by CWE · observed example (3)

  • CWE-184 Incomplete List of Disallowed Inputs weakness
  • CWE-23 Relative Path Traversal weakness
  • CWE-28 Path Traversal: '..\filedir' weakness

References