Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://pulhas.org/phrack/55/P55-07.html |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2001-09-12T04:00:00
Updated: 2024-08-01T17:11:02.894Z
Reserved: 2001-08-31T00:00:00
Link: CVE-1999-1377
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 1999-09-09T04:00:00.000
Modified: 2008-09-05T20:19:22.617
Link: CVE-1999-1377
Redhat
No data.