积极预防 及时发现
快速响应 力保恢复
Arcadia Internet Store 1.0 中的tradecli.dll允许远程攻击者通过...
发布时间:2001-09-20 信息来源:管理员

CNCVE编号:CNCVE-20010704 CVE编号:CAN-2001-0704 安全级别:中 漏洞中文描述: Arcadia Internet Store 1.0 中的tradecli.dll允许远程攻击者通过对一个不存在的文件的带有模板参数中的URL请求来发现工作目录的全称路径。 漏洞英文描述: tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory via a URL with a template argument for a file that does not exist. 漏洞参考: Reference: BUGTRAQ:20010621 NERF Advisory #2 - 1C:Arcadia multiple vulnerablilities. Reference: URL: Reference: XF:arcadia-tradecli-reveal-path(6738) Reference: URL: