The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Communicator | Netscape | 4.0 (including) | 4.0 (including) |
Communicator | Netscape | 4.05 (including) | 4.05 (including) |
Communicator | Netscape | 4.5 (including) | 4.5 (including) |
Communicator | Netscape | 4.06 (including) | 4.06 (including) |
Communicator | Netscape | 4.6 (including) | 4.6 (including) |
Communicator | Netscape | 4.07 (including) | 4.07 (including) |
Communicator | Netscape | 4.51 (including) | 4.51 (including) |