52
Reference Description
CVE-2001-0480 read of arbitrary files and directories using GET or CD with "..." in Windowsbased
FTP server.
https://www.cve.org/CVERecord?id=CVE-2001-0480
CVE-2002-0288 read files using "." and Unicode-encoded "/" or "\" characters in the URL.
https://www.cve.org/CVERecord?id=CVE-2002-0288
CVE-2003-0313 Directory listing of web server using "..."
https://www.cve.org/CVERecord?id=CVE-2003-0313
CVE-2005-1658 Triple dot
https://www.cve.org/CVERecord?id=CVE-2005-1658
CVE-2000-0240 read files via "/........../" in URL
https://www.cve.org/CVERecord?id=CVE-2000-0240
CVE-2000-0773 read files via "...." in web server
https://www.cve.org/CVERecord?id=CVE-2000-0773
CVE-1999-1082 read files via "......" in web server (doubled triple dot?)
https://www.cve.org/CVERecord?id=CVE-1999-1082
CVE-2004-2121 read files via "......" in web server (doubled triple dot?)
https://www.cve.org/CVERecord?id=CVE-2004-2121
CVE-2001-0491 multiple attacks using "..", "...", and "...." in different commands
https://www.cve.org/CVERecord?id=CVE-2001-0491
CVE-2001-0615 "..." or "...." in chat server
https://www.cve.org/CVERecord?id=CVE-2001-0615
CVE-2005-2169 chain: ".../...//" bypasses protection mechanism using regexp's that remove "../"
resulting in collapse into an unsafe value "../" (CWE-182) and resultant path
traversal.
https://www.cve.org/CVERecord?id=CVE-2005-2169
CVE-2005-0202 ".../....///" bypasses regexp's that remove "./" and "../"
https://www.cve.org/CVERecord?id=CVE-2005-0202
CVE-2004-1670 Mail server allows remote attackers to create arbitrary directories via a ".." or
rename arbitrary files via a "....//" in user supplied parameters.
https://www.cve.org/CVERecord?id=CVE-2004-1670
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 981 SFP Secondary Cluster: Path Traversal 888 2409
MemberOf 1345 OWASP Top Ten 2021 Category A01:2021 - Broken
Access Control
1344 2487
MemberOf 1404 Comprehensive Categorization: File Handling 1400 2529
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Relative Path Traversal
Software Fault Patterns SFP16 Path Traversal
Related Attack Patterns
CAPEC-ID Attack Pattern Name
76 Manipulating Web Input to File System Calls
139 Relative Path Traversal
References
CWE Version 4.14
CWE-24: Path Traversal: '../filedir'
CWE-24: Path Traversal: '../filedir'