|
I suppose this hasn't been to Bugtraq
until now.
This bug was tested with vqserver -
Web server for Win95/98/NT and it works with all versions. It's similar to the
ICQ Personal Web Server bug: With "..../" after the URL of a vqServer
it's possible to change the directory and to leave the reserved
"public" directory. If you know the full path and name of a file on
the hd, it's possible to download every file from that host.
CU,
SoulPatrol
|
