168 matches found
CVE-2001-1005
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges...
CVE-2000-1005
The CVE-2000-1005 entry concerns directory traversal in eXtropia WebStore CGI scripts (html_web_store.cgi and web_store.cgi). An attacker can read arbitrary files by supplying a .. (dot dot) path in the page parameter, enabling remote file disclosure. The vulnerability is evidenced by multiple so...
CVE-2000-1005
Directory traversal vulnerability in htmlwebstore.cgi and webstore.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. dot dot attack on the page parameter...
CVE-2000-1005
Directory traversal vulnerability in htmlwebstore.cgi and webstore.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. dot dot attack on the page parameter...
CVE-1999-1005
Vulnerability (CVE-1999-1005) GroupWise Web Interface GWWEB.EXE permits remote file read via a directory-traversal style attack on the HELP parameter, enabling reading local files with .htm extensions. The OpenVAS entry corroborates that by modifying the GroupWise Web Interface HELP URL request, ...