Protected files access in LilHTTP updated since 24.02.2002
Published:		22.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1810
Type:		remote
Level:		5/10
Description:		By using ./ and ../ it's possible to access any files.

Affected:

SUMMITCN : LilHTTP 2.1

Original document		SECURITEAM, [NT] Lil' HTTP Server "Referer" Cross Site Scripting Vulnerability (22.04.2002)
		SECURITEAM, [NT] Lil' HTTP Server Directory Traversal Vulnerability (22.04.2002)
		Tamer Sahin, SecurityOffice Security Advisory:// LilHTTP Web Server Protected File Access Vulnerability (24.02.2002)

Discuss:

Read or add your comments to this news (0 comments)