CVE-2001-0938 Information

Description

Directory traversal vulnerability in AspUpload 2.1 in certain configurations allows remote attackers to upload and read arbitrary files and list arbitrary directories via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.

Reference

http://marc.info/?l=bugtraq&m=100715294425985&w=2 http://www.iss.net/security_center/static/7628.php http://www.iss.net/security_center/static/7629.php http://www.securityfocus.com/bid/3608