CVE:CVE-2004-2121
CNNVD:CNNVD-200412-437
Borland Web Server (BWS) 1.0b3版本及之前版本存在多个目录遍历漏洞。远程攻击者可以借助URL中的(1)多点"......" 序列或者(2) "%5c%2e%2e"(编码的"\..")序列读取和下载任意文件。
solution:Upgrade borland_software web_server_for_corel_paradox to a higher version than 1.0_b3,and avoid the version (,1.0_b3]