CVE-2003-0505

Description

Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.

Affected products

• Microsoft / netmeeting3.0.1 – 3.0.1

References

• MISChttp://www.securityfocus.com/bid/7931
• MAILING_LISThttp://marc.info/?l=bugtraq&m=105716650021546&w=2