Dbd::pg Security Vulnerabilities

CVE-2001-0805

Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg...

Tarantella Enterprise ttawebtop.cgi pg Parameter Traversal Arbitrary File Access

The 'ttawebtop.cgi' CGI is installed. The installed version is affected by multiple flaws : It is possible to read arbitrary files from the remote system by including directory traversal strings in the request. It may be possible for an attacker to execute arbitrary commands with...

Tarantella Enterprise 3 3.x - TTAWebTop.cgi Arbitrary File Viewing

Tarantella Enterprise 3 3.x - TTAWebTop.cgi Arbitrary File...

Tarantella Enterprise 3 3.x - 'TTAWebTop.cgi' Arbitrary File Viewing

...

Advisory CA-2001-05

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-05 Exploitation of snmpXdmid Original release date: March 30, 2001 Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Any machine running Solaris 2.6, 7, or 8 with snmpXdmid installed and ...

Adcycle 0.77/0.78 - AdLibrary.pm Session Access

...

Adcycle 0.770.78 - AdLibrary.pm Session Access

Adcycle 0.770.78 - AdLibrary.pm Session...

@stake Advisory: PalmOS Password Retrieval and Decoding (A092600-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: PalmOS Password Retrieval and Decoding (A092600-1) Release Date: 09/26/2000 Application: PalmOS 3.5.2 and...

XChat URL handler vulnerabilty

Email was sent to [email protected] (the author of xchat) and after over a week, I have received no reply. So here it is... the advisory. zen-parse - blinking since 1992 (or mebe earlier) X X CC H H AA TTTTT X X C C H H A A T X C HHHH AAAA T X X C C H H A ...

Blackboard Courseinfo v4.0 User Authentication

Apparently Courseinfo (or at least the implementation I was playing with) has no user authentication, meaning that anyone can force feed their own form values and Perl with merrily modify the database. So for instance running: (all form input is in caps for readability)...

CVE-2000-0355

pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary...

CVE-2000-0355

pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary...

suse6.2pbpg.txt

...

Linux_suse_exploits.txt

...

CVE-2000-0355

pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary...

ebayla.txt

...

cognos.powerplay.txt

...

runtime-kernel-kmem-patching.txt

...