/../ - bug in vqServer for Win

[Soul_Patrol () GMX NET (SoulPatrol)]

I suppose this hasn't been to Bugtraq until now. 
This bug was tested with vqserver - Web server for Win95/98/NT and it works with all versions. It's similar to the ICQ 
Personal Web Server bug: With "..../" after the URL of a vqServer it's possible to change the directory and to leave 
the reserved "public" directory. If you know the full path and name of a file on the hd, it's possible to download 
every file from that host.

CU, SoulPatrol

<!-- body="end" -->
<HR>

<UL>
<LI><STRONG>Next message:</STRONG> Chris Green: "Re: WindowMaker bugs (was sub:none )"
<LI><STRONG>Previous message:</STRONG> Josip Rodin: "Re: [Linux] glibc 2.1.x / wu-ftpd <=2.5 / BeroFTPD / lynx / vlock 
/ mc / glibc 2.0.x"
</UL>
<HR>

<SMALL>

This archive was generated by hypermail 2.0b3 
on Sat Aug 28 1999 - 00:23:30 CDT</EM>
</EM>
</SMALL>
</BODY>
</HTML>