The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Communicator | Netscape | 4.0 (including) | 4.0 (including) |
| Communicator | Netscape | 4.05 (including) | 4.05 (including) |
| Communicator | Netscape | 4.5 (including) | 4.5 (including) |
| Communicator | Netscape | 4.06 (including) | 4.06 (including) |
| Communicator | Netscape | 4.6 (including) | 4.6 (including) |
| Communicator | Netscape | 4.07 (including) | 4.07 (including) |
| Communicator | Netscape | 4.51 (including) | 4.51 (including) |