← back
CVE-2001-1026

CVE-2001-1026

EPSS 1.6%
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6816https://exchange.xforce.ibmcloud.com/vulnerabilities/6817https://exchange.xforce.ibmcloud.com/vulnerabilities/6818https://exchange.xforce.ibmcloud.com/vulnerabilities/6819http://www.securityfocus.com/bid/2996http://www.securityfocus.com/bid/2998http://www.securityfocus.com/bid/3000