CVE-2008-1117

CVE-2008-1117 describes a directory traversal/file upload vulnerability in Timbuktu Pro 8.6.5 for Windows (tb2ftp.dll) with possible impact on Mac OS X 8.7. An attacker can upload a file to an arbitrary location by crafting a destination filename that uses a backslash followed by "../" sequences,...

CVE-2008-1117

Directory traversal vulnerability in the Notes aka Flash Notes or instant messages feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ backslash character followe...

Core Security Technologies Advisory 2008.0204

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Timbuktu Pro Remote Path Traversal and Log Injection Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204...

CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Timbuktu Pro Remote Path Traversal and Log Injection Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204...

Timbuktu Pro Remote Path Traversal and Log Injection

Timbuktu Pro Remote Path Traversal and Log Injection Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs-research Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204 Advisory URL:...

CVE-2008-1117

creationtimestamp| type| source ---|---|--- 2008-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5238 2008-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/4455 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16339 2018-05-29...

CVE-2007-1117

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1117

CVE-2005-1117 concerns All4WWW-Homepagecreator 1.0a, where index.php is vulnerable to PHP remote file inclusion via manipulation of the site parameter to reference a remote URL. The underlying issue is unsafe inclusion of external PHP code, enabling arbitrary code execution on the server. The NVD...

CVE-2003-1117

Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2003-1117

CVE-2003-1117 affects RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x. The issue is a buffer overflow in URL error handling, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The published CVSS vector indicates NETWORK access, low attack c...

CVE-2004-1117

CVE-2004-1117 affects ChessBrain: init scripts in ChessBrain 20407 and earlier run user-owned binaries with root privileges, enabling local privilege escalation by modifying those programs. Connected advisories (Gentoo GLSA 200411-26) advise upgrading to the latest packages (e.g., chessbrain >...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

CVE-2003-1117

Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

CVE-2001-1117

The affected product is LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware prior to 1.39.3 Beta. The vulnerability allows a remote attacker to view administration and user passwords by connecting to the router and inspecting the HTML source of (1) index.htm and (2) Password.htm). Root c...

CVE-2001-1117

LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for 1 index.htm and 2 Password.htm...

CVE-1999-1117

CVE-1999-1117 affects IBM AIX 4.1 and 4.2 where the lquerypv component can be exploited locally to read arbitrary files by supplying a file path in the -h argument. The underlying issue is a local access vulnerability impacting confidentiality (per CVSS: Partial). No explicit exploit code, workar...

CVE-2000-1117

CVE-2000-1117 affects the Lotus Notes Client R5. The JVM’s Extended Control List (ECL) feature enables a timing side channel via getSystemResource to infer whether a local file exists, by comparing dialog timing when a Java applet accesses local files. An attacker using a malicious applet in the ...