CVE-2001-1586

CRITICAL 10.0CVE-2001-1586 · Published 12/02/2010 · updated 16/06/2026

In short

CVE-2001-1586 is a CRITICAL (CVSS 10.0) vulnerability affecting simpleserver www (analogx).
Chance of exploitation in the next 30 days (EPSS): 8.4%, higher than 95.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simpleserver www analogx	`= 1.0.8= 1.01= 1.03= 1.04= 1.05= 1.06≤ 1.13`	No fix yet

Description

Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.

References

seclists.org/bugtraq/2001/Jul/660 · Exploit
analogx.com/contents/download/network/sswww.htm
securiteam.com/windowsntfocus/5TP0B1P4UK.html · Exploit
securityfocus.com/bid/3112 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/56631

More vulnerabilities in simpleserver www

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

simpleserver www

analogx

= 1.0.8= 1.01= 1.03= 1.04= 1.05= 1.06≤ 1.13

No fix yet

More vulnerabilities in simpleserver www

See all →