[23485] in bugtraq
Webseal 3.8
daemon@ATHENA.MIT.EDU (Matthew Lane)
Thu Dec 13 12:24:45 2001
Date: 11 Dec 2001 09:22:50 -0000
Message-ID: <20011211092250.15791.qmail@mail.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Matthew Lane <MatthewL@Janusassociates.com>
To: bugtraq@securityfocus.com
I am inspecting a webseal box, version 3.8. When
appending a %2e to the URL, the webseal application
dies. Has anyone else ever encountered this? I
know that there are some directory traversal issues
in previous versions that utilize a %2e. But I can't find
anything that mentions the application going down.