CVE Vulnerabilities

CVE-2001-0871

Published: Dec 21, 2001 | Modified: Dec 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.

Affected Software

Name Vendor Start Version End Version
Alchemy_eye Alchemy_lab 2.0 2.0
Alchemy_eye Alchemy_lab 2.1 2.1
Alchemy_eye Alchemy_lab 2.2 2.2
Alchemy_eye Alchemy_lab 2.3 2.3
Alchemy_eye Alchemy_lab 2.4 2.4
Alchemy_eye Alchemy_lab 2.5 2.5
Alchemy_eye Alchemy_lab 2.6 2.6
Alchemy_eye Alchemy_lab 2.6.18 2.6.18
Alchemy_eye Alchemy_lab 2.6.19 2.6.19
Alchemy_eye Alchemy_lab 3.0 3.0
Alchemy_eye Alchemy_lab 3.0.10 3.0.10
Alchemy_network_monitor Dek_software * 3.0.10

References