Description
Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.
References
- 10262 vdb-entry
- 20040503 Multible_Vulnerabilites_in_Aldos_Webserver mailing-list
- 11542 third-party-advisory
- 5881 vdb-entry
- aweb-dotdot-directory-traversal(16048) vdb-entry
- http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt