CNCVE编号：CNCVE-20010615 CVE编号：CAN-2001-0615 安全级别：中 漏洞中文描述： Faust Informatics Freestyle Chat server 4.1 SR3早期版本中的目录遍历漏洞允许远程攻击者通过一个特地制作的包括“..”攻击的变种如“...”或“....”的URL来阅读任意文件。 漏洞英文描述： Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'. 漏洞参考： Reference: BUGTRAQ:20010525 Advisory for Freestyle Chat server Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html Reference: BID:2776 Reference: URL:http://www.securityfocus.com/bid/2776 Reference: XF:freestyle-chat-dire 系统类型：其他 漏洞类型：输入有效性检查错误