174 matches found
CVE-2005-1205
The CVE-2005-1205 issue is a documented information-disclosure vulnerability in the Microsoft Telnet client across Windows XP, Windows Server 2003, and Windows Services for UNIX. Exploitation arises from handling the Telnet NEW-ENVIRON command (SEND ENV_USERVAR), allowing a remote attacker to rea...
CVE-2003-1205
CVE-2003-1205 affects Crob FTP Server 2.60.1. Affected component: the FTP server’s file-rename handling. Root cause: remote authenticated users can trigger a denial of service (crash) by renaming a file to the MS-DOS device name “con.” Impact: DoS via crash; no other impacts described in the prov...
CVE-2004-1205
codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message...
CVE-2004-1205
CVE-2004-1205 affects pnTresMailer 6.03, via codebrowserpntm.php and an invalid filetohighlight parameter that causes an error message to disclose the full file path. This is an information-disclosure vulnerability that can enable an attacker to learn sensitive path details. Public sources (NVD/N...
CVE-2004-1205
codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message...
PostNuke pnTresMailer codebrowserpntm.php Traversal Arbitrary File Access
The remote host is running a version of the pnTresMailer PostNuke module which is vulnerable to a directory traversal attack. An attacker may use this flaw to read arbitrary files on the remote web server, with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2000-1205
CVE-2000-1205 covers cross-site scripting in Apache 1.3.0–1.3.11. The vulnerability allows remote attackers to execute script as other visitors via (1) printenv CGI (printenv.pl) output, (2) error pages generated by ap_send_error_response (e.g., default 404) that omit an explicit charset, or (3) ...
CVE-2001-1205
Public technical details beyond the initial description are not provided in the connected documents. CVE-2001-1205 is described as a directory traversal in lastlines.cgi (Last Lines 2.0); monitor for updates.
CVE-1999-1205
CVE-1999-1205 affects nettune on HP-UX 10.01 and 10.00 where nettune is installed with setuid root, enabling a local attacker to modify critical networking configuration and cause a denial of service. The underlying cause is the risky setuid configuration of nettune, leading to elevated privilege...
CVE-1999-1205
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information...
CVE-2001-1205
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $errorlog variable...
CVE-2000-1205
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via 1 the printenv CGI printenv.pl, which does not encode its output, 2 pages generated by the apsenderrorresponse function such as a default 404, which does not...
