CVE-2004-0578 Information

Description

WinGate 5.2.3 build 901 and 6.0 beta 2 build 942 and other versions such as 5.0.5 allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory.

Reference

http://marc.info/?l=full-disclosure&m=108872788123695&w=2 http://www.idefense.com/application/poi/display?id=113 https://exchange.xforce.ibmcloud.com/vulnerabilities/16589