CVE-1999-0287

The writeup describes a directory traversal vulnerability in the freeware guestbook package, allowing arbitrary file read via the 'template' parameter in rguest.exe or wguest.exe. The example demonstrates retrieving boot.ini by manipulating the parameter.

The exploit demonstrates an arbitrary file read vulnerability in the freeware guestbook package by manipulating the 'template' parameter in rguest.exe or wguest.exe to retrieve sensitive files from the server. The example provided shows how to fetch the $winnt$.inf file by specifying its path.