CVE-2000-0174

Description

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Affected products

• sun / staroffice5.1 – 5.1

Exploits & proofs of concept

• exploit-dbSun StarOffice 5.1 - Arbitrary File Readby Vanja Hrustic

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html
• MISChttp://www.securityfocus.com/bid/1040