Description
bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.
References
- bigip-bigconf-view-files(7771) vdb-entry
- 19991109 mailing-list
- 778 vdb-entry
- 19991108 BigIP - bigconf.cgi holes mailing-list
- 19991109 Re: BigIP - bigconf.cgi holes mailing-list