Unscored CVE-2004-0578 EUVD-2004-0577GHSA-22vw-27vp-9fr9

WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via lea…

Published Jul 6, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory.

References

20040701 iDEFENSE Security Advisory 07.01.04: WinGate Information Disclosure mailing-list
http://www.idefense.com/application/poi/display?id=113
wingate-directory-traversal(16589) vdb-entry