CVE-2004-2121 | BDVDB-2026-10486 Detail

Description#

Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/9486
http://securitytracker.com/id?1008840
https://exchange.xforce.ibmcloud.com/vulnerabilities/14948
http://marc.info/?l=bugtraq&m=107497413413907&w=2

Exploit#

No public exploit known

History#

Version 12005-05-27Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.