Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1013191 | Exploit Vendor Advisory |
http://secunia.com/advisories/14283 | Vendor Advisory |
Configurations
Information
Published : 2005-05-01 21:00
Updated : 2008-09-05 13:46
NVD link : CVE-2005-0450
Mitre link : CVE-2005-0450
JSON object : View
CWE
Products Affected
sami
- sami_http_server