CVE:CVE-2009-4645
CNNVD:CNNVD-201002-190
Accellion Secure File Transfer Appliance存在目录遍历漏洞。远程攻击者可以通过lang参数(在参数中加入..)，读取任意文件。
solution:Upgrade accellion secure_file_transfer_appliance to a higher version than 7_0_135,7_0_178,7_0_189,7_0_259,7_0_296,and avoid the version 7_0_135,7_0_178,7_0_189,7_0_259,7_0_296