Exploit alt-n WorldClient standard 2.1 - Directory Traversal

[Exploiter]

EDB-ID

20070

Проверка EDB

1. Пройдено

Автор

RIKARD CARLSSON

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

cve-2000-0660

Дата публикации

2000-07-12

source: https://www.securityfocus.com/bid/1462/info

The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any file of known location.

Example: 
http://email.victim.com/..\..\..\winnt\repair\sam._