Description
Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
References
- 20001023 Allaire JRUN 2.3 Arbitrary File Retrieval mailing-list
- allaire-jrun-ssifilter-url(5405) vdb-entry
- ASB00-028 vendor-advisory