CVE-2001-1139

Description

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.

Affected products

• ascii_nt / winwrapper_professional2.0 – 2.0

References

• MISChttp://www.securityfocus.com/bid/3219
• MISChttp://www.iss.net/security_center/static/7015.php
• MISChttp://www.securityfocus.com/archive/1/209414
• MISChttp://www.tsc.ant.co.jp/products/download.htm