|
|
|
 |
Vulnerability Note VU#146704Hyperseek 2000 hsx.cgi does not adequately filter user input disclosing directory listings and file contentsOverviewiWeb Systems Hyperseek search engine may allow malformed URL requests to access files outside the document root of a vulnerable system.I. DescriptionA specially crafted URL can disclose the directory listing and files of the target system with read permissions.II. ImpactRemote attackers may be able to disclose directory listings and files of the target system with read permissions.III. SolutionContact the vendor to obtain a patch.
Referenceshttp://www.securityfocus.com/bid/2314 Mc GaN <vipersv@mail.ru>, has been publicly credited for discovering this vulnerability. This document was written by Ian A. Finlay.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
|||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||