CVE-2000-1036

The CVE-2000-1036 issue affects Extent RBS ISP web server. A directory traversal flaw exists in the Image parameter of the Newuser CGI, allowing an unauthenticated attacker to read arbitrary files with the web server’s privileges by crafting a .. (dot dot) path. OpenVAS/Nessus entries corroborate...