78
Reference Description
CVE-2005-2147 Path traversal using absolute pathname
https://www.cve.org/CVERecord?id=CVE-2005-2147
CVE-2000-0614 Arbitrary files may be overwritten via compressed attachments that specify
absolute path names for the decompressed output.
https://www.cve.org/CVERecord?id=CVE-2000-0614
CVE-1999-1263 Mail client allows remote attackers to overwrite arbitrary files via an e-mail
message containing a uuencoded attachment that specifies the full pathname
for the file to be modified.
https://www.cve.org/CVERecord?id=CVE-1999-1263
CVE-2003-0753 Remote attackers can read arbitrary files via a full pathname to the target file in
config parameter.
https://www.cve.org/CVERecord?id=CVE-2003-0753
CVE-2002-1525 Remote attackers can read arbitrary files via an absolute pathname.
https://www.cve.org/CVERecord?id=CVE-2002-1525
CVE-2001-0038 Remote attackers can read arbitrary files by specifying the drive letter in the
requested URL.
https://www.cve.org/CVERecord?id=CVE-2001-0038
CVE-2001-0255 FTP server allows remote attackers to list arbitrary directories by using the
"ls" command and including the drive letter name (e.g. C:) in the requested
pathname.
https://www.cve.org/CVERecord?id=CVE-2001-0255
CVE-2001-0933 FTP server allows remote attackers to list the contents of arbitrary drives via a
ls command that includes the drive letter as an argument.
https://www.cve.org/CVERecord?id=CVE-2001-0933
CVE-2002-0466 Server allows remote attackers to browse arbitrary directories via a full
pathname in the arguments to certain dynamic pages.
https://www.cve.org/CVERecord?id=CVE-2002-0466
CVE-2002-1483 Remote attackers can read arbitrary files via an HTTP request whose
argument is a filename of the form "C:" (Drive letter), "//absolute/path", or ".." .
https://www.cve.org/CVERecord?id=CVE-2002-1483
CVE-2004-2488 FTP server read/access arbitrary files using "C:\" filenames
https://www.cve.org/CVERecord?id=CVE-2004-2488
CVE-2001-0687 FTP server allows a remote attacker to retrieve privileged web server system
information by specifying arbitrary paths in the UNC format (\\computername
\sharename).
https://www.cve.org/CVERecord?id=CVE-2001-0687
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 981 SFP Secondary Cluster: Path Traversal 888 2409
MemberOf 1404 Comprehensive Categorization: File Handling 1400 2529
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Absolute Path Traversal
Software Fault Patterns SFP16 Path Traversal
Related Attack Patterns
CWE Version 4.14
CWE-37: Path Traversal: '/absolute/pathname/here'
CWE-37: Path Traversal: '/absolute/pathname/here'