CVE-1999-1069

The CVE-1999-1069 issue concerns the iCat Carbo Server 3.0.0, where the CGI component carbo.dll fails to sanitize the icatcommand parameter, enabling a remote attacker to perform a directory traversal and read arbitrary files. The vulnerability outcome is information disclosure (PARTIAL confident...

CVE-1999-1069

Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the icatcommand parameter...