Debian DSA-264-1 : lxr - missing filename sanitizing

Upstream developers of lxr, a general hypertext cross-referencing tool, have been alerted of a vulnerability that allows a remote attacker to read arbitrary files on the host system as user www-data. This could disclose local files that were not meant to be shared with the public. %NASLMINLEVEL...

CVE-2003-0156

The CVE-2003-0156 vulnerability affects Cross-Referencing Linux (LXR), specifically the CGI component handling the v parameter in the source page. The root cause is insufficient input sanitization, enabling a directory-traversal attack to read arbitrary files on the host. This is evidenced by Deb...

CVE-2003-0156

Directory traversal vulnerability in Cross-Referencing Linux LXR allows remote attackers to read arbitrary files via .. dot dot sequences in the v parameter...