CVE-2002-1238

Published: Nov 12, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.

Affected (1)

Products: Peter Sandvik: Simple Web Server

Peter Sandvik

1 product

Simple Web Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Peter Sandvik Simple Web Server	version ≤ 0.5.1

References (10)

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103679016031857&w=2

Source: cve@mitre.org

http://www.idefense.com/advisory/11.08.02a.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/6145

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/10563

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html