Jana Web Server Encoded Traversal Arbitrary File Access

2001-05-07T00:00:00
ID OSVDB:12223
Type osvdb
Reporter OSVDB
Modified 2001-05-07T00:00:00

Description

Manual Testing Notes

http://[target]/%2e%2e/%2e%2e/%2e%2e/scandisk.log

References:

Vendor URL: http://www.janaserver.de/ Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html ISS X-Force ID: 6513 CVE-2001-0557 Bugtraq ID: 2703