What’s Vulnerable › Vulnerabilities

CVE-2001-0748

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-10-18 · updated 2026-06-16
• Weakness: CWE-20

Description

Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.

Affected products

• Acme Labs Acme Server: 1.7

References

• http://www.cisco.com/warp/public/707/acmeweb-acsunix-dirtravers-vuln-pub.shtml
• http://www.iss.net/security_center/static/6634.php
• http://www.osvdb.org/5544
• http://www.securityfocus.com/archive/1/188141
• http://www.securityfocus.com/bid/2809
• http://www.cisco.com/warp/public/707/acmeweb-acsunix-dirtravers-vuln-pub.shtml
• http://www.iss.net/security_center/static/6634.php
• http://www.osvdb.org/5544
• http://www.securityfocus.com/archive/1/188141
• http://www.securityfocus.com/bid/2809

Get alerted when CVE-2001-0748 or the next vulnerability affects your stack