Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Perl Web Server Path Traversal Vulnerability

Perl Web Server, an experimental cross-platform web server project, does not prevent a remote user from requesting documents outside the ServerRoot (location of the virtual / directory).

This means that if an attacker knows the location of a sensitive file relative to the ServerRoot, he can retrieve the contents of the file by making an HTTP request containing the relative path.







 

Privacy Statement
Copyright 2009, SecurityFocus