Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

KeyFocus KF Web Server Directory Traversal Vulnerability

KeyFocus KF Web Server is vulnerable to a directory traversal attack. This is due to the web server's inability to properly handle file names containing consecutive dot characters. By exploiting this vulnerability, an attacker is able to break out of the web root and retrieve any file readable by the web server. Only files of recognized MIME types can be retrieved.







 

Privacy Statement
Copyright 2009, SecurityFocus