Description
Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitrary files via a .. (dot dot) in any parameter that opens a file, such as (1) s or (2) p.
References
- 20060126 [HSC] Multiple transversal bug in vis mailing-list
- http://www.hackerscenter.com/archive/view.asp?id=22236
- 16401 vdb-entry
- 376 third-party-advisory
- 1015547 vdb-entry
- facecontrol-vis-directory-traversal(24374) vdb-entry