[mrtg] Re: directory traversal problems with 14all.cgi

[Greg.Volk at edwardjones.com]

> 
> Hi 
> I have 14all.cgi 1.1p15 installed on an Apache 1.3 WebServer running on
> Linux version 2.2.17-21mdk.
> The problem is apparent on this configuration in that you can read the 1st
> uncommented line of any text file that has read access for other if you know
> the path to it...
>  
> Chris Morris
> Unix Services
> Innogy Plc
> 


For the record, my vulnerable configuration is 14all.cgi 1.1p15, 
Apache 1.3, slackware linux 7 with kernel 2.2.13.



--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi