Description
Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi.
References
- mrtg-cgi-view-files(8062) vdb-entry
- 20020202 new advisory mailing-list
- 4017 vdb-entry