CVE-2001-1152

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-09-05 · updated 2026-06-16

Description

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.

Affected products

Baltimore Technologies Websweeper: 4.02

References

http://www.mimesweeper.com/support/technotes/notes/1043.asp
http://www.securityfocus.com/archive/1/212283
http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296
http://www.mimesweeper.com/support/technotes/notes/1043.asp
http://www.securityfocus.com/archive/1/212283
http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296

Get alerted when CVE-2001-1152 or the next vulnerability affects your stack