Description (CNA)
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html
- http://www.securityfocus.com/bid/1402
ADP enrichment
No English description supplied.