CVE-2001-0557: T. Hauck Jana Web Server

Medium severity, CVSS 5.0. EPSS: 10.5% chance of exploitation in the next 30 days.

T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).

Affected products

• T. Hauck Jana Web Server: up to and including 1.46; version 1.0j only; version 1.45 only; version 2.0_beta_1 only

Published 2001-08-14. Last modified 2026-06-16.