CVE-2001-0200

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-02017.5The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arCVE-2001-02025.0Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.CVE-2001-020310.0Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a fCVE-2001-02045.0Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP pCVE-2001-02055.0Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the rCVE-2001-02065.0Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) oCVE-2001-020710.0Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after aCVE-2001-02084.6MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, whCVE-2001-020910.0Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possiblCVE-2001-02105.0Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in tCVE-2001-02115.0Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextfoCVE-2001-02127.5Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parame
CVE-2001-0200: Medium severity, CVSS 5.0 | Vulnix