CVE-2004-2253

Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a .. in the page parameter of the show command.

Date published : 2005-07-17

http://www.securityfocus.com/bid/10103

http://members.lycos.co.uk/r34ct/main/SurgeLDAP%201.0g.txt