Description
Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ (backslash) characters in the URL to certain directories under the web root, such as the image directory.
References
- 20060623 [SNS Advisory No.88] Webmin Directory Traversal Vulnerability mailing-list
- webmin-backslash-directory-traversal(27366) vdb-entry
- http://www.webmin.com/changes.html
- 1161 third-party-advisory
- 1016375 vdb-entry
- 20777 third-party-advisory
- ADV-2006-2493 vdb-entry
- JVN#67974490 third-party-advisory
- 18613 vdb-entry
- http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html