faust informatics freestyle chat 4.1 sr2 - Directory Traversal Vulnerability

2001-05-25T00:00:00
ID EDB-ID:20882
Type exploitdb
Reporter nemesystm
Modified 2001-05-25T00:00:00

Description

Faust Informatics Freestyle Chat 4.1 SR2 Directory Traversal Vulnerability. CVE-2001-0615. Remote exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/2776/info

Freestyle Chat server from Faust Informatics incorporates interactive chat functionality into websites.

Versions of Freestyle Chat are vulnerable to directory traversal attacks. This can allow a remote user to request files from outside the normal webserver directory scope.

Properly exploited, this could provide information useful in further attacks on the vulnerable host. 

http://www.example.com/.../.../scandisk.log