CVE-2001-0804

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the "next" parameter.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.osvdb.org/683
http://www.securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com
http://www.securityfocus.com/bid/3028Exploit, Patch, Vendor Advisory
http://www.valeriemates.com/story_download.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6843
http://www.osvdb.org/683
http://www.securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com
http://www.securityfocus.com/bid/3028Exploit, Patch, Vendor Advisory
http://www.valeriemates.com/story_download.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6843

Timeline

Published: Dec 6, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-08055.0Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files vi CVE-2001-08063.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop CVE-2001-08072.6Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client'CVE-2001-080810.0gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file CVE-2001-08092.1Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users CVE-2001-08157.5Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP CVE-2001-08167.5OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authori CVE-2001-081710.0Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and ga CVE-2001-08187.5A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the CVE-2001-08197.5A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email head CVE-2001-08207.5Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log f CVE-2001-08215.0The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read s