Description
Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" (encoded dot dot) in the URL.
References
- 8411 third-party-advisory
- 20030325 IRM 005: JWalk Application Server Version 3.2c9 Directory Traversal Vulnerability mailing-list
- 7160 vdb-entry
- http://www.irmplc.com/advisory/adv5.htm
- 1006378 vdb-entry
- 4927 vdb-entry
- jwalk-dotdot-directory-traversal(11623) vdb-entry