PT-2001-1979 · Unknown · Interactive Story

Published 2001-12-06 · Updated 2017-10-10 · CVE-2001-0804

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Interactive Story version 1.3

Description A directory traversal issue exists, allowing a remote attacker to read arbitrary files. This is achieved through a .. (dot dot) attack on the next parameter in the story.pl file.

Recommendations For Interactive Story version 1.3, consider restricting access to the story.pl file or the next parameter to minimize the risk of exploitation. Avoid using the next parameter in a way that could facilitate a directory traversal attack until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2001-0804

Affected Products

Interactive Story

References · 8

• 🔥 https://exploit-db.com/exploits/21008 · Exploit
• 🔥 http://securityfocus.com/bid/3028 · Exploit
• 🔥 http://securityfocus.com/archive/1/[e-mail] · Exploit
• http://valeriemates.com/story_download.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0804 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6843 · Note
• http://osvdb.org/683 · Note
• http://securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com · Note