CVE-2001-0748: Acme Labs Acme Server

Medium severity, CVSS 5.0. EPSS: 9.2% chance of exploitation in the next 30 days.

Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.

Affected products

• Acme Labs Acme Server: version 1.7 only

Published 2001-10-18. Last modified 2026-06-16.