Description
BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
References
- badblue-protected-file-access(10466) vdb-entry
- 6044 vdb-entry
- 20021024 [SecurityOffice] BadBlue Web Server v1.7 Protected File Access Vulnerability mailing-list