CVE-2001-0971

Description

Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.

Affected products

• aci / 4d_webserver6.5.7 – 6.5.7

References

• MISChttp://www.securityfocus.com/bid/3209
• MISChttp://www.securityfocus.com/archive/1/206102
• MISChttp://www.iss.net/security_center/static/7010.php