MetaProducts Offline Explorer 1.0 x/1.1 x/1.2 x - Directory Traversal

Author: Wyzewun
type: remote
platform: multiple
port: 
date_added: 2000-05-19 
date_updated: 2012-07-19 
verified: 1 
codes: CVE-2000-0436;OSVDB-7937 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/1231/info

MetaProducts Offline Explorer is an application that allows a user to download the contents of a website or FTP site for offline browsing at a later time.

It is possible to view known files on a system Offline Explorer resides on. By default, Offline Explorer listens on port 800. A remote user may retrieve the contents of known files without any authorization whatsoever by performing a GET request and implementing the double dot "../..\" directory traversal technique.

Eg.

http://target:800/../..\