Description
Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
References
- 1016875 vdb-entry
- 1636 third-party-advisory
- 20060916 Busy box httpd file traversal vulenrability mailing-list
- 20067 vdb-entry