Description
Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
References
- 4221 vdb-entry
- 20020302 RealPlayer bug mailing-list
- realplayer-http-directory-traversal(8336) vdb-entry