CVE-2000-0638

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the HOSTSVC parameter...

CVE-2000-0640

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. dot dot attack, which provides different error messages depending on whether the file exists or not...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0565

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. dot dot attack...

CVE-1999-0842

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...

CVE-1999-0842

CVE-1999-0842 affects the Symantec Mail-Gear 1.0 web interface server. The issue allows remote attackers to read arbitrary files via a .. (dot dot) path traversal, due to improper validation of file paths. The provided documents do not include specific exploit details or a confirmed remediation; ...

CVE-2000-0436

MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-1999-1005

Vulnerability (CVE-1999-1005) GroupWise Web Interface GWWEB.EXE permits remote file read via a directory-traversal style attack on the HELP parameter, enabling reading local files with .htm extensions. The OpenVAS entry corroborates that by modifying the GroupWise Web Interface HELP URL request, ...

CVE-1999-0897

iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0318

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-2000-0052

Technical details for CVE-2000-0052 are not publicly provided in the supplied documents; only the generic description is present. Monitor for updates in connected sources for affected products, versions, impact, and remediation.

CVE-2000-0144

Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...

CVE-2000-0144

CVE-2000-0144 (Axis 700 Network Scanner) involves improper access control: administrator URLs are not properly restricted, permitting a dot-dot directory traversal to bypass password protection. Affected: Axis 700 Network Scanner; Trigger: access to admin URLs via .. traversal; Impact: password b...

CVE-2000-0052

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. dot dot attack...

CVE-1999-0958

Technical details about CVE-1999-0958 are not publicly provided in the connected documents. The available sources reiterate the arbitrary command execution via sudo 1.5.x. Monitor for updates.

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0282

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...

CVE-1999-0695

The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. dot dot attack...

CVE-2000-0188

EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...