CNCVE编号:CNCVE-20010297 CVE编号:CAN-2001-0297 安全级别:低 漏洞中文描述: Simple Server HTTPd 1.0 最初的 Free Java Server) 中的目录遍历漏洞允许远程攻击者通过在URL中的“..”来阅读任意文件。 漏洞英文描述: Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. 漏洞参考: Reference: BUGTRAQ:20010224 The Simple Server HTTPd Directory Traversal Reference: URL:http://www.securityfocus.com/archive/1/165523 Reference: BID:2415 Reference: URL:http://www.securityfocus.com/bid/2415 系统类型:其他 漏洞类型:权限有效性检查错误