Description
Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename.
References
- 20050930 Buffer-overflow and directory traversal bugs in Virtools Web Player mailing-list
- virtools-file-overwrite(22471) vdb-entry
- 40 third-party-advisory
- 1014993 vdb-entry
- 17034 third-party-advisory
- 14991 vdb-entry
- http://aluigi.altervista.org/adv/virtbugs-adv.txt