CVE-2001-1152 | BDVDB-2026-3739 Detail

Description#

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mimesweeper.com/support/technotes/notes/1043.asp
http://www.securityfocus.com/archive/1/212283
http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296

Exploit#

No public exploit known

History#

Version 12002-03-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.