Re: Vulnerability in AOLserver

2001-02-09 Thread bugtraq
AOLserver v3.2 is a web server available from http://www.aolserver.com. A vulnerability exists which allows a remote user user to break out of the web root using relative paths (ie: '...'). AOLserver v3.2 on Linux (RH 6.0) does not appear to be vulnerable. OS-dependent code?

Vulnerability in AOLserver

2001-02-08 Thread Bob Rogers
From: [EMAIL PROTECTED] Date: Tue, 6 Feb 2001 02:31:40 -0800 . . . AOLserver v3.2 is a web server available from http://www.aolserver.com. A vulnerability exists which allows a remote user user to break out of the web root using relative paths (ie: '...').

Vulnerability in AOLserver

2001-02-06 Thread joetesta
Vulnerability in AOLserver Overview AOLserver v3.2 is a web server available from http://www.aolserver.com. A vulnerability exists which allows a remote user user to break out of the web root using relative paths (ie: '...'). Details AOLServer checks the requested virtual path

Re: Vulnerability in AOLserver

2001-02-06 Thread Michael A. Cleverly
On Tue, 6 Feb 2001 [EMAIL PROTECTED] wrote: Vulnerability in AOLserver Overview AOLserver v3.2 is a web server available from http://www.aolserver.com. A vulnerability exists which allows a remote user user to break out of the web root using relative paths (ie: '...'). Details