https://sourceforge.net/p/pxbmsps/bugs/Recent changes to bugsenSat, 13 Aug 2005 09:00:47 -0000https://sourceforge.net/p/pxbmsps/bugs/1/<div class="markdown_content"><p>re-inspecting the code, I have found that it is<br /> possible for a client connecting to the server, to<br /> access files outside the folders shared by the server,<br /> (if the know where to look).</p> <p>As most clients browse it is not possible to exploit<br /> this bug using your ordinary client as XMC and others.<br /> But cunstructing a client that could read outside the<br /> shared forlders would not be hard</p> <p>It is recomented that pxbmsps is NOT run under a priv.<br /> user (AND DON'T EVEN THINK ABOUT RUNNING IT AS ROOT)</p></div>Michael ThorsagerSat, 13 Aug 2005 09:00:47 -0000https://sourceforge.netf1877cfb58fd6dba82a7e526fc984c3080ab6277