CVE-2002-2145 - Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename

Back Back to CVE browser

HIGH

Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename

Published Nov 16, 2005

7.5

HIGH

CVSS 2.0

EPSS 7.65%

Description

Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://online.securityfocus.com/archive/1/291791
mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/10104.php
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/5709
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-2124
Advisory

Link	Providers	Tags
http://online.securityfocus.com/archive/1/291791		mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/10104.php		vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/5709		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-2124		Advisory