CVE-2009-3902

Publication date

2009-11-06 15:00:00

Family

mitre

State

PUBLISHED

Description

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. (slash backslash dot dot) in the URL.