Re: unarj dir-transversal bug (../../../..)

[<doubles () hush com>]

On Mon, 11 Oct 2004 03:38:38 -0700 Chris Umphress <umphress () gmail com>
wrote:
> That was certainly a useful explanation. Isn't stuff on this list
> supposed to be readable? Anyhow, if I'm reading what you've said
> correctly, it's supposed to work that way. Most programs pass the
> "../" (or "..\") to the OS to handle.

http://www.google.com/search?q=%22directory+traversal%22&meta=

doubles




Concerned about your privacy? Follow this link to get
secure FREE email: http://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
http://www.hushmail.com/services-messenger?l=434

Promote security and make money with the Hushmail Affiliate Program: 
http://www.hushmail.com/about-affiliate?l=427

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html