Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jrun | Macromedia | 2.3.3 (including) | 2.3.3 (including) |
| Jrun | Macromedia | 3.0 (including) | 3.0 (including) |
| Jrun | Macromedia | 3.1 (including) | 3.1 (including) |
References
- http://www.iss.net/security_center/static/7678.php
- http://www.macromedia.com/v1/handlers/index.cfm?ID=22290\u0026Method=Full
- http://www.securityfocus.com/bid/3666
- http://www.iss.net/security_center/static/7678.php
- http://www.macromedia.com/v1/handlers/index.cfm?ID=22290\u0026Method=Full
- http://www.securityfocus.com/bid/3666