[mrtg] Re: directory traversal problems with 14all.cgi

Chris Morris CHRIS.MORRIS at innogy.com
Wed Feb 6 17:56:56 MET 2002

I have 14all.cgi 1.1p15 installed on an Apache 1.3 WebServer running on
Linux version 2.2.17-21mdk.
The problem is apparent on this configuration in that you can read the 1st
uncommented line of any text file that has read access for other if you know
the path to it...
Chris Morris
Unix Services
Innogy Plc

The information contained in this email is intended only for the 
use of the intended recipient at the email address to which it 
has been addressed. If the reader of this message is not an 
intended recipient, you are hereby notified that you have received 
this document in error and that any review, dissemination or
copying of the message or associated attachments is strictly 

If you have received this email in error, please contact the sender
by return email or call 01793 877777 and ask for the sender and 
then delete it immediately from your system.

Please note that neither Innogy nor the sender accepts any 
responsibility for viruses and it is your responsibility to scan 
attachments (if any).

Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

More information about the mrtg mailing list