← Database

CVE-2001-0748

MEDIUM CVSS: 5.0 Published: 2001-10-18 Modified: 2026-06-16

Description

Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.

Affected Platforms

Acme Labs Acme Server

Weakness Type

CWE-20

References