Bugtraq mailing list archives
A little advisory content correction.
From: j00ru.vx () gmail com
Date: 18 Sep 2007 20:05:05 -0000
There is a small mistake in the line: readme.txt /../../../../../../../../asdf.exe This filename originally looks like: readme.txt <40 spaces here> /../../../../../../../../asdf.exe What I mean, is that only the "readme.txt" part of path is visible for the user, and the directory traversal string can be easily hidden in this way. The forty space characters aren't displayed correctly due to the fact that they are shortened to one space by the browser. j00ru
Current thread:
- A little advisory content correction. j00ru . vx (Sep 18)