Lucene search

K
exploitdbUssr LabsEDB-ID:19601
HistoryNov 04, 1999 - 12:00 a.m.

etype eserv 2.50 - Directory Traversal

1999-11-0400:00:00
Ussr Labs
www.exploit-db.com
20

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/773/info

Etype's Eserv product is designed to be a one-source internet connectivity solution, incorporating mail, web, ftp, and proxy servers into one package. The web server will allow remote browsing of the entire filesystem by the usage of ../ strings in the URL. This gives an attacker read access to every file on the server's filesystem that the webserver has access to. 

http://victim.com/../../../autoexec.bat 

AI Score

7.4

Confidence

Low

Related for EDB-ID:19601