tHTTPd directory traversal updated since 03.11.2003
Published:		03.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		3224
Type:		remote
Level:		5/10
Description:		If virtual hosts are usid it's possible to traverse directories with ../ in Host: header.

Affected:

THTTPD : thttpd 2.23

Original document

SECURITEAM, [UNIX] tHTTPd Virtual Hosting Security Hole (Host: ../..) (03.11.2003)

Discuss:

Read or add your comments to this news (0 comments)