CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. dot dot in the RootName parameter...

CVE-2002-0772

CVE-2002-0772 describes a directory traversal vulnerability in the Hosting Controller’s dsnmanager.asp, exploitable via a .. payload in the RootName parameter to read arbitrary files. Affected component is the web interface/dsnmanager.asp; root cause is improper validation of the RootName input, ...