Test ID:	1.3.6.1.4.1.25623.1.0.10010
Category:	Remote file access
Title:	AliBaba path climbing
Summary:	NOSUMMARY
Description:	Description: The remote HTTP server allows an attacker to read arbitrary files on the remote web server, simply by adding dots in front of its name. Example: GET /../../winnt/boot.ini will return your C:\winnt\boot.ini file. Solution : Upgrade your web server to a version that solves this vulnerability, or consider changing to another web server, such as Apache (http://www.apache.org). Risk factor : High
Cross-Ref:	BugTraq ID: 270 Common Vulnerability Exposure (CVE) ID: CVE-1999-0776 http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533 XForce ISS Database: http-alibaba-dotdot
Copyright	This script is Copyright (C) 1999 Renaud Deraison

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.