Bugtraq mailing list archives
/../ - bug in vqServer for Win
From: Soul_Patrol () GMX NET (SoulPatrol)
Date: Wed, 25 Aug 1999 22:20:46 +0200
I suppose this hasn't been to Bugtraq until now. This bug was tested with vqserver - Web server for Win95/98/NT and it works with all versions. It's similar to the ICQ Personal Web Server bug: With "..../" after the URL of a vqServer it's possible to change the directory and to leave the reserved "public" directory. If you know the full path and name of a file on the hd, it's possible to download every file from that host. CU, SoulPatrol <!-- body="end" --> <HR> <UL> <LI><STRONG>Next message:</STRONG> Chris Green: "Re: WindowMaker bugs (was sub:none )" <LI><STRONG>Previous message:</STRONG> Josip Rodin: "Re: [Linux] glibc 2.1.x / wu-ftpd <=2.5 / BeroFTPD / lynx / vlock / mc / glibc 2.0.x" </UL> <HR> <SMALL> This archive was generated by hypermail 2.0b3 on Sat Aug 28 1999 - 00:23:30 CDT</EM> </EM> </SMALL> </BODY> </HTML>
Current thread:
- /../ - bug in vqServer for Win SoulPatrol (Aug 25)