CVE-2000-0039

Description

AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.

Affected products

• altavista / search_intranet2.0b – 2.0b
• altavista / search_intranet2.3a – 2.3a

References

• MISChttp://www.osvdb.org/15
• MISChttp://www.securityfocus.com/bid/896