COMMAND

	
		WebServer 4 Everyone directory traversal bug
	
	

SYSTEMS AFFECTED

	
		WebServer 4 Everyone Version: 1.22
	
	

PROBLEM

	
		In UkR-XblP of UkR security team [http://ust.dp.ua] advisory :
		

		problem is caused by the character '\' (%5c) that is not checked as  bad
		character, so the server follow the path in the URI  that  the  attacker
		give until it reach the file requested.
		

		 Exploits: 

		

		http://host/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini

		

		or
		

		GET /\..\..\..\..\..\boot.ini HTTP/1.0

		

		This last is an HTTP request that can be sent with telnet  because  some
		browsers can modify the "\.." chars.
	
	

SOLUTION