CVE-2001-1209

The CVE-2001-1209 issue concerns the zml.cgi CGI script, where a directory traversal via the file parameter allows reading arbitrary files on the web server. Reports clearly state the vulnerability exists in zml.cgi and that the exploit would enable access to files the cgi/httpd user can read. Th...

CVE-2001-1209

Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...