CVE-2001-1344

CVE-2001-1344 concerns WSSecurity.pl in WebStore, where authentication can be bypassed by supplying a filename that exists, aided by a null character or a .. traversal. Affected is WebStore’s WSSecurity.pl component; the underlying issue is improper handling of user-supplied filenames enabling by...