info
discussion
exploit
solution
references
PServ Remote Source Code Disclosure Vulnerability
An exploit is not required.
The following proof of concept is available:
http://www.example.com/somedir/../cgi-bin/test.pl
Privacy Statement
Copyright 2010, SecurityFocus