File protection bypass in LightServe updated since 25.10.2002
Published:		15.11.2002
Source:		BUGTRAQ
SecurityVulns ID:		2367
Type:		remote
Level:		5/10
Description:		It is possible to construct a web request which is capable of accessing the contents of password protected files/folders.

Affected:		PERCEPTION : Liteserve Web Server 2.0
		PERCEPTION : LiteServe 2.03

Original document		Matthew Murphy, Perception LiteServe HTTP CGI Disclosure Vulnerability (15.11.2002)
		Tamer Sahin, [SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability (25.10.2002)

Files:		LiteServe 2.02 and prior - CGI Disclosure
Discuss:		Read or add your comments to this news (0 comments)