Netscape Directory Server 4.12 - Directory Server Directory Traversal Vulnerability

2000-10-25T00:00:00
ID EDB-ID:20325
Type exploitdb
Reporter CORE-SDI
Modified 2000-10-25T00:00:00

Description

Netscape Directory Server 4.12 Directory Server Directory Traversal Vulnerability. CVE-2000-1075. Remote exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/1839/info
 
 
Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use of "\../" in a HTTP request. The following services are affected by this vulnerability:
 
- The Agent services server on port 8100/tcp
- The End Entity services server on port 443/tcp (Accessible through SSL)
- The Administrator services server on a random port configured during installation.
 
https://target/ca/\../\../\../\file.ext