11 lines
No EOL
602 B
Text
11 lines
No EOL
602 B
Text
source: https://www.securityfocus.com/bid/3838/info
|
|
|
|
EServ is a combination Mail, News, Web, FTP and Proxy Server for Microsoft Windows 9x/NT/2000 systems.
|
|
|
|
It is possible to construct a web request which is capable of accessing the contents of password protected files/folders on the webserver, such as the admin folder, which contains the administrative interface.
|
|
|
|
It should be noted that this vulnerability may only be exploited to access password-protected files in sub-folders of wwwroot.
|
|
|
|
The following example will give the attacker access to the administrative interface:
|
|
|
|
http://host/./admin/ |