CNCVE编号：CNCVE-20010785 CVE编号：CAN-2001-0785 安全级别：中 漏洞中文描述： Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 的Webpaging接口程序中的目录遍历允许远程攻击者通过“..”攻击来阅读任意文件。 漏洞英文描述： Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows allows remote attackers to read arbitrary files via a .. (dot dot) attack. 漏洞参考： Reference: BUGTRAQ:20010618 Multiple Vulnerabilities In AMLServer Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html Reference: BID:2883 Reference: URL:http://www.securityfocus.com/bid/2883 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：输入有效性检查错误