CVE-2005-1691

SAP Internet Graphics Server (IGS) in SAP, prior to version 6.40 Patch 11, is affected by a directory traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via .. sequences in an HTTP GET request. Root cause: improper validation of the request path leading t...