2001-07-27 04:00:00
mitre
PUBLISHED
T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a .. (dot dot) attack which is URL encoded (%2e%2e).