CNCVE编号：CNCVE-20010674 CVE编号：CAN-2001-0674 安全级别：中 漏洞中文描述： RobTex Viking Web server在1.07-381之前的版本的目录遍历允许远程攻击者通过在一个HTTP URL请求中的十六进制加密的“..”(如http://www.server.com/%2e%2e/%2e%2e)。 漏洞英文描述： Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexidecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request. 漏洞参考： Reference: BUGTRAQ:20010417 Advisory for Viking Reference: URL:http://www.securityfocus.com/archive/1/177231 Reference: CONFIRM:http://www.robtex.com/viking/bugs.htm Reference: XF:viking-hex-directory-traversal(6394) Reference: URL:http://xforce.iss.n 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误