CVE ID:	CAN-2001-0212
Description:	Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0212 Bugtraq: 20010212 HIS Auktion 1.62: "show files" vulnerability and remote command execute. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-02/0218.html BugTraq ID: 2367 http://www.securityfocus.com/bid/2367

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: