Description
Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via "../" or "..\" sequences in the URL.
References
- 17419 third-party-advisory
- http://aluigi.altervista.org/adv/asusvsbugs-adv.txt
- 15281 vdb-entry
- 20051102 Buffer-overflow and directory traversal in Asus mailing-list