Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://pulhas.org/phrack/55/P55-07.html |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2001-09-12T04:00:00
Updated: 2024-08-01T17:11:02.894Z
Reserved: 2001-08-31T00:00:00
Link: CVE-1999-1377

No data.

Status : Modified
Published: 1999-09-09T04:00:00.000
Modified: 2024-11-20T23:30:58.153
Link: CVE-1999-1377

No data.