newsbot
03-03-2008, 02:19 PM
MiniWebsvr (http://miniwebsvr.sourceforge.net/) is "a tiny/small HTTP web server that aims to one day be embeddable". A vulnerability in MiniWebSvr allows remote attackers to access files that reside outside the bounding HTML root directory.
http://www.securiteam.com/windowsntfocus/5HP070UNPA.html
http://www.securiteam.com/windowsntfocus/5HP070UNPA.html