CVE-2004-2121

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.

Affected products

Borland Software Web Server For Corel Paradox: through 1.0_b3

References

http://marc.info/?l=bugtraq&m=107497413413907&w=2
http://securitytracker.com/id?1008840
http://www.securityfocus.com/bid/9486
https://exchange.xforce.ibmcloud.com/vulnerabilities/14948
http://marc.info/?l=bugtraq&m=107497413413907&w=2
http://securitytracker.com/id?1008840
http://www.securityfocus.com/bid/9486
https://exchange.xforce.ibmcloud.com/vulnerabilities/14948

Get alerted when CVE-2004-2121 or the next vulnerability affects your stack