CVE-2004-2565

The CVE-2004-2565 issue affects Sambar Server 6.1 Beta 2 on Windows (and possibly other versions on Linux). The root cause is directory traversal in two vectors: (1) a ".." sequence in the file parameter to showini.asp, and (2) an absolute path with a drive letter in the log parameter to showlog....

CVE-2004-2565

Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via 1 a ".." dot dot backslash i...