Microsoft NetMeeting Directory Traversal Vulnerability

Bugtraq ID:	7931
Class:	Input Validation Error
CVE:	CVE-2003-0505
Remote:	Yes
Local:	No
Published:	Jul 02 2003 12:00AM
Updated:	Jul 11 2009 10:06PM
Credit:	Discovery is credited to Hernán Ochoa, Gustavo Ajzenman, Javier Garcia Di Palma and Pablo Rubinstein from Core Security Technologies.
Vulnerable:	Microsoft NetMeeting 3.0.1 4.4.3385 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 + Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 + Microsoft Windows XP Home + Microsoft Windows XP Professional
Not Vulnerable:

Microsoft NetMeeting Directory Traversal Vulnerability

Solution:
Microsoft has addressed this issue in Microsoft Windows 2000 SP4 and Windows XP SP1. Users are advised to upgrade as soon as possible.