194 matches found
CVE-2004-0061
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...
CVE-2004-0061
CVE-2004-0061 affects WWW File Share Pro 2.42 and earlier . It allows remote attackers to bypass directory access restrictions by using a URL with a trailing dot or a URI beginning with a slash or backslash. The impact described is partial disclosure/integrity/availability with a network attack v...
CVE-2002-0061
Apache HTTP Server on Windows (Win32) is vulnerable prior to versions 1.3.24 and 2.0.x prior to 2.0.34-beta. The flaw allows remote attackers to execute arbitrary commands by sending shell metacharacters (a pipe |) as arguments to batch (.bat) or .cmd scripts, which reach the shell interpreter (c...
Apache on Windows < 1.3.24 / 2.0.x < 2.0.34 DOS Batch File Arbitrary Command Execution
Apache for Win32 prior to 1.3.24 and 2.0.x prior to 2.0.34-beta is shipped with a default script, '/cgi-bin/test-cgi.bat', that allows an attacker to remotely execute arbitrary commands on the host subject to the permissions of the affected application. An attacker can send a pipe character '|'...
CVE-2003-0061
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable...
CVE-2001-0061
procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's...
CVE-2001-0061
The CVE-2001-0061 issue affects procfs in FreeBSD (and possibly other OSes), where access to per-process mem and ctl files is not properly restricted. This lets a local attacker cause a privilege escalation by forking a child process and running a privileged executable from the child, while the p...
CVE-2001-0061
procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's...
CVE-1999-0061
CVE-1999-0061 concerns the BSD line printer daemon (lpd). Multiple sources confirm a vulnerability in lpd related to file creation and deletion and remote execution. Affected software is BSD-derived lpd implementations; the root cause is not explicitly detailed in the provided documents. Reported...
CVE-2000-0061
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading...
CVE-1999-0061
File creation and deletion, and remote execution, in the BSD line printer daemon lpd...
CVE-2000-0061
CVE-2000-0061 affects Internet Explorer 5. The vulnerability: during window loading, the document’s security zone is not updated until after loading, permitting a remote attacker to execute JavaScript in a different security context while the page is loading. The record indicates a maximum CVSS v...
CVE-2000-0061
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading...