Test ID:	10489
Category:	CGI abuses
Title:	AnalogX web server traversal
Summary:	NOSUMMARY
Description:	Description: It is possible to read arbitrary files on the remote server by prepending %2E%2E/%2E%2E/ in front of the file name sent as a URL string to the remote web server. Solution : If you are using AnalogX SimpleServer:www, upgrade to the latest version. If you are using another web server, contact your vendor for a patch. Risk factor : High
Cross-Ref:	BugTraq ID: 1508 Common Vulnerability Exposure (CVE) ID: CVE-2000-0664 http://www.securityfocus.com/bid/1508 Bugtraq: 20000726 AnalogX "SimpleServer:WWW" dot dot bug (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0374.html http://www.osvdb.org/388 XForce ISS Database: analogx-simpleserver-directory-path(4999) https://exchange.xforce.ibmcloud.com/vulnerabilities/4999
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.