Description
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
References
- 4912 vdb-entry
- 20020601 BadBlue Web Server v1.7.0 Directory Contents Disclosure mailing-list
- badblue-directory-contents-disclosure(9239) vdb-entry