RSS   Vulnerabilities for 'Hellbent'   RSS

2002-12-31
 
CVE-2002-2095

 

 
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow.

 
 
CVE-2002-2094

 

 
Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.

 


Copyright 2024, cxsecurity.com

 

Back to Top