CVE-2001-0368

MEDIO 5.0CVE-2001-0368 · Published 27/06/2001 · updated 16/06/2026

En resumen

CVE-2001-0368 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a bearshare (free peers).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.1%, mayor que el 81.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
bearshare free_peers	`= 2.2= 2.2.1≤ 2.2.2`	No fix yet

Description

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack.

References

osvdb.org/1810
securityfocus.com/archive/1/180644 · Patch
securityfocus.com/bid/2672 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/6481

Más vulnerabilidades de bearshare

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free