Beveiligingsadvies
CVE-2008-0338
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.