Ashley Brown iWeb Server Encoded Backslash Directory Traversal Vulnerability

ID SSV:77089
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


It has been reported that iWeb Server is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '..%5C' character sequences.

Successful exploitation of this vulnerability may allow a remote attacker to gain access to sensitive information, which may be used to mount further attacks against a vulnerable system. %5C..%5C..%5C/winnt/win.ini