Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetMeeting远程目录遍历漏洞
Vulnerability Description
Windows NetMeeting是流行的可以在多人之间进行视频会议的程序。 Windows NetMeeting的文件传输功能存在目录遍历问题,远程攻击者可以利用这个漏洞把文件存放到目标系统的任意位置。 当文件传输过程中,攻击者如果使用的文件名包含"..\..\",由于NetMeeting没有任何过滤处理,可导致绕过NetMeeting原来的目录限制存储在其他文件系统中。虽然在文件传输结束后会出现对话框,会提醒用户,但是用户却没有被提示拒绝或者接收文件传输。攻击者可以把恶意程序存放到系统自启动目录来执
CVSS Information
N/A
Vulnerability Type
N/A