Обратный путь в директориях в Tivoli SecureWay (directory traversal)

Можно обойти защиту от обратного пути используя кодирование . как 2e...

CVE-2001-1310

IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1309

Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...