CVE-2008-0338

EPSS 2.8%

Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4923unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/28512 https://exchange.xforce.ibmcloud.com/vulnerabilities/39713 https://www.exploit-db.com/exploits/4923 http://www.bugtraq.ir/adv/miniweb_english.pdf http://www.securityfocus.com/bid/27319 http://www.vupen.com/english/advisories/2008/0176