CVE-1999-0467

The writeup describes a directory traversal vulnerability in the freeware guestbook package, allowing arbitrary file read via the 'template' parameter in rguest.exe or wguest.exe. The example demonstrates retrieving boot.ini by manipulating the path.

This is a writeup describing a directory traversal vulnerability in the freeware guestbook package. The vulnerability allows an attacker to read arbitrary files by manipulating the 'template' parameter in rguest.exe or wguest.exe.