source: wwwsecurityfocuscom/bid/689/info
TeamTrack 300 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed This server does not filter out requested paths containing the / sequence Because of this, an attacker can specify a file outside of the nor ...