CVE-2004-1814

Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. dot dot sequences in an HTTP request, as demonstrated using home.asp...

CVE-2004-1813

VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash /...

vocaltec8.txt

Application VocalTec Gateway Vendors: http://www.vocaltec.com Versions: 8 Platforms: Windows Bug: Reverse Directory Transversal + Authorization Bypass Risk: High Exploitation: Remote with browser Date: 14 Mar 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

VocalTec Gateway 8 Reverse Directory Transversal + Authorization Bypass

Application VocalTec Gateway Vendors: http://www.vocaltec.com Versions: 8 Platforms: Windows Bug: Reverse Directory Transversal + Authorization Bypass Risk: High Exploitation: Remote with browser Date: 14 Mar 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...