Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.

The AspUpload software resides on this server. Some versions of this software are vulnerable to remote exploit.

The Hosting Controller application resides on this server. This version is vulnerable to multiple remote exploits.  See http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html for more information

At least one example script distributed with AspUpload appears to be installed on the remote web server.  AspUpload is an ASP script that supports saving and processing files uploading through other web scripts, and the example script likely contains a flaw that allows an attacker to upload arbitrary files and store them anywhere on the affected drive.

ID	Name	Product	Family	Severity
1714	AspUpload Multiple Script File Upload / Directory Traversal	Nessus Network Monitor	Web Servers	high
1701	Hosting Controller Multiple Script Arbitrary Directory Browsing	Nessus Network Monitor	Web Servers	high
1699	Hosting Controller Multiple Script Arbitrary Directory Browsing	Nessus Network Monitor	Web Servers	high
1697	Hosting Controller Multiple Script Arbitrary Directory Browsing	Nessus Network Monitor	Web Servers	high
1695	Hosting Controller Multiple Script Arbitrary Directory Browsing	Nessus Network Monitor	Web Servers	high
1693	Hosting Controller Multiple Script Arbitrary Directory Browsing	Nessus Network Monitor	Web Servers	high
11746	AspUpload Test11.asp Arbitrary File Upload	Nessus	CGI abuses	high

Detections

Analytics

CVE-2001-0938

high

Tenable Plugins

high

high

high

high

high

high

high