Secunia

iDefense has reported a vulnerability in WinGate, allowing malicious people to retrieve arbitrary files.

The problem is that WinGate allows malicious people to retrieve arbitrary files. This can be exploited through the web interface using directory traversal attacks such as "///file_name".

Example:
http://wingate/wingate-internal/[file]

The following versions are reportedly vulnerable:
* WinGate 5.2.3 build 901
* WinGate 6.0 beta 2 build 942

Prior versions may also be affected.

Solution
Disable the proxy server or restrict access.
Further details available in Customer Area

Provided and/or discovered by
Discovered by an anonymous person and reported through iDefense.

Original Advisory
http://www.idefense.com/application/poi/display?id=113&type=vulnerabilities

Deep Links
Links available in Customer Area