CVE-2004-2121: Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote att...

Security readout for executives and security teams

CVE-2004-2121 is an old directory traversal flaw in Borland Web Server 1.0b3 and earlier. A remote attacker could use crafted URLs to read and download files outside the intended web directory. The main business risk is exposure of configuration files, credentials, source code, or other sensitive local files from legacy systems. Exposure is most likely on legacy internet-facing or internal systems still running Borland Web Server 1.0b3 or earlier. Because the product is old, risk depends heavily on asset inventory quality and whether forgotten services remain reachable. Prioritize verification, not broad emergency action. If BWS 1.0b3 or earlier is present and reachable, treat it as a high-risk legacy exposure requiring rapid isolation or replacement. If inventory confirms no BWS use, document the finding as not applicable. Mitigation focus: Inventory for Borland Web Server 1.0b3 or earlier.; Remove or isolate any affected legacy instances.; Check vendor or archival guidance for available fixes..

Prepared

Jun 29, 2026, 20:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.