Unscored CVE-2003-0839 EUVD-2003-0830GHSA-q485-f3ch-xvgp

Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitr…

Published Oct 9, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.

References

20031008 Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability mailing-list
http://www.geocities.co.jp/SiliconValley/1667/advisory08e.html