Unscored CVE-2000-1048 EUVD-2000-1035GHSA-2j9j-c9fr-pwc8

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files …

Published Nov 29, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.

References

wingate-view-files(5373) vdb-entry
20001016 Wingate 4.1 Beta A vulnerability mailing-list