3Com_Network_Supervisor_Directory_Traversal_attack

A directory traversal vulnerability exists in the 3Com Network Supervisor product. The flaw is caused by insufficient sanitization of HTTP requests. This vulnerability allows an unauthorized user to read arbitrary files on the target host. The target will not exhibit any unusual behaviour as a result of this attack. A successful attack will result in potentially sensitive information being disclosed to an unprivileged user. The content of arbitrary files, specified by the attacker in the request will be served in the HTTP response.