Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.
| Software | From | Fixed in |
|---|---|---|
| robtex / viking_server | - | 1.0.7_build381.x |
| robtex / viking_server | 1.0.4 | 1.0.4.x |
| robtex / viking_server | 1.0.6 | 1.0.6.x |
| robtex / viking_server | 1.0.7 | 1.0.7.x |