[mrtg] Re: directory traversal problems with 14all.cgi

Greg.Volk at edwardjones.com Greg.Volk at edwardjones.com
Wed Feb 6 18:08:54 MET 2002

> Hi 
> I have 14all.cgi 1.1p15 installed on an Apache 1.3 WebServer running on
> Linux version 2.2.17-21mdk.
> The problem is apparent on this configuration in that you can read the 1st
> uncommented line of any text file that has read access for other if you know
> the path to it...
> Chris Morris
> Unix Services
> Innogy Plc

For the record, my vulnerable configuration is 14all.cgi 1.1p15, 
Apache 1.3, slackware linux 7 with kernel 2.2.13.

Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

More information about the mrtg mailing list