Description
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow.
References
- hellbent-prefs-obtain-info(7931) vdb-entry
- 3909 vdb-entry
- 20020118 Vulnerability in hellbent mailing-list