CNCVE编号：CNCVE-20010676 CVE编号：CAN-2001-0676 安全级别：高 漏洞中文描述： Rit Research Labs The Bat! 1.48f及其早期版本中的目录遍历漏洞允许远程攻击者通过对用于附件的文件名中的“..”攻击来创建任意文件。 漏洞英文描述： Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment. 漏洞参考： Reference: BUGTRAQ:20010104 SECURITY.NNOV advisory - The Bat! directory traversal (public release) Reference: URL:http://www.securityfocus.com/archive/1/154359 Reference: XF:thebat-attachment-directory-traversal(5871) Reference: URL:http://xforce.iss 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：输入有效性检查错误