FW: CHINANSL Security Advisory(CSA-200108)

[Jon Stevens]

----------
From: Stian Myhre <[EMAIL PROTECTED]>
Reply-To: Stian Myhre <[EMAIL PROTECTED]>
Date: Mon, 2 Apr 2001 11:54:52 +0200
To: [EMAIL PROTECTED]
Subject: Re: CHINANSL Security Advisory(CSA-200108)

Hi all.

It is possible not only to get the listing
but also the files.
If you use replace the last / with %5c it will
give you the file.

example:
> http://target:8080/%2e%2e/%2e%2e%5cyourfilehere%00.jsp

-Njack