Verity Ultraseek admin/logfile.txt 路径遍历漏洞

漏洞信息详情

Verity Ultraseek中的admin/logfile.txt存在绝对路径遍历漏洞，远程攻击者可以通过name变量来读取任意文件。

来源: XF

名称: verity-ultraseek-logfile-info-disclosure(30321)

链接:http://xforce.iss.net/xforce/xfdb/30321

来源: MISC

链接:http://www.zerodayinitiative.com/advisories/ZDI-06-042.html

来源: MISC

链接:http://www.ultraseek.com/support/docs/RELNOTES.txt

来源: www.ultraseek.com

链接:http://www.ultraseek.com/support/docs/release_notes/ultraseek.5.6.2.txt

来源: BUGTRAQ

名称: 20061115 ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability

链接:http://www.securityfocus.com/archive/1/archive/1/451847/100/0/threaded

来源: OSVDB

名称: 30289

链接:http://www.osvdb.org/30289

来源: SECUNIA

名称: 22892

链接:http://secunia.com/advisories/22892

暂无