CVE-2002-1523

The CVE-2002-1523 entry concerns the Daniel Arenz Mini Server 2.1.6. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files via ../ or ..\ sequences. This is caused by improper handling of relative path traversal in the server, leading to potential exposur...

Directory traversal in Daniel Arenz' Mini Server

Hi! There is a directory traversal flaw in Daniel Arenz' Mini Server 2.1.6 tested on Windows XP Professional. It could be that prior versions are also affected. It's possible to show every by the web server readable file on the target system by using one of the following URLs:...