CVE-2000-0443

Description

The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Affected products

• HP / jetadmin6.0 – 6.0

References

• MISChttp://www.osvdb.org/1350
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-05/0281.html
• MISChttp://www.securityfocus.com/bid/1243