CVE-2003-1239

Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter...

WihPhoto sendphoto.php Traversal Arbitrary File Access

It is possible to make the remote host mail any file contained on its hard drive by using a flaw in WihPhoto's 'util/email.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Refs: http://www.frog-man.org/tutos/WihPhoto.txt From: "Frog Man" To: [email protected] Subject:...

CVE-2002-1239

QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program...

CVE-2001-1239

PowerNet IX is identified as the affected product. The CVE-2001-1239 entry describes a remote-denial-of-service condition triggered by a port scan. The available documents do not provide root cause details, affected versions, specific vulnerable components, exploit code, or remediation steps. Exp...

CVE-1999-1239

HP-UX 9.x is reported to not properly enable the Xauthority mechanism in certain conditions, potentially allowing local users to access the X display without authorization. The provided sources consistently describe the issue as a local-privilege/unauthorized-access concern but do not include con...

CVE-2001-1239

PowerNet IX allows remote attackers to cause a denial of service via a port scan...

CVE-2000-1239

The HTTP interface of Tivoli Lightweight Client Framework LCF in IBM Tivoli Management Framework 3.7.1 sets httpdisable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log...