CVE-2001-0557

CVE-2001-0557 describes a directory traversal vulnerability in T. Hauck Jana Webserver versions 1.46 and earlier. An unauthenticated remote attacker can exploit this flaw by using URL-encoded dot-dot sequences (%2e%2e) to access and view arbitrary files on the server. This vulnerability is rated Medium severity (CVSS 5.0), indicating it can be exploited over the network with low attack complexity, leading to a partial compromise of confidentiality without affecting integrity or availability. The EPSS score is low, suggesting a low probability of exploitation, but the FAUCET Risk Score is high at 95/100. While not listed on the CISA KEV catalog, exploit code for this vulnerability is publicly available on ExploitDB (EDB-20829). There is significant community discussion, with 10 mentions, indicating awareness and interest in this older vulnerability.