Directory traversal

Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ dot dot backslash in a response to a LIST command, a related issue to CVE-2002-1345...

Directory traversal

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345...

Directory traversal

Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\ dot dot backslash in a response to a LIST command, a related issue to CVE-2002-1345...

Directory traversal

Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by...

CVE-2008-1345

CVE-2008-1345 affects MyioSoft EasyCalendar (plugins/calendar/calendar_backend.php) up to version 4.0tr and earlier. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the day parameter in a dayview action, allowing remote attackers to inject arbitrary web script or HTML. The ...

Debian: Security Advisory (DSA-1345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1345

CVE-2003-1345 describes a directory traversal vulnerability in s.dll of WebCollection Plus 5.00, where remote attackers can view arbitrary files on the C: drive via a full pathname supplied in the d parameter. Affected software is WebCollection Plus 5.00 (s.dll); underlying root cause is improper...

Debian DSA-1345-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3844 'mozbugra4' discovered that a regression in the handling of'about:blank' windows used ...

Null pointer dereference

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

CVE-2007-1648 affects 0irc 1345 build 20060823. A remote attacker can cause an application crash by having the IRC server send a long string to a client, triggering a NULL pointer dereference (DoS). Root cause: NULL pointer dereference when processing oversized server messages. Impact: denial of ...

CVE-2007-1345

CVE-2007-1345 affects CA eTrust Admin (GINA component) cube.exe in versions 8.1.0–8.1.2. It allows attackers with physical interactive access or Remote Desktop to bypass authentication and escalate privileges via the password-reset interface. Root cause: privilege-escalation in the reset workflow...

[CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability

Title: CAID 35145: CA eTrust Admin Privilege Escalation Vulnerability CA Vuln ID CAID: 35145 CA Advisory Date: 2007-03-08 Impact: Attackers can gain escalated privileges. Summary: The CA eTrust Admin GINA component contains a privilege escalation vulnerability within the reset password interface...

CentOS 3 / 4 : squid (CESA-2005:415)

An updated squid package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A race condition bug was found in the way Squid handles the now obsolete Set-Cook...

CVE-2006-1345

CVE-2006-1345 affects MyBB (MyBulletinBoard) 1.10 in polls.php. A vote action using option[]=null can trigger an error message that exposes the server path, enabling information disclosure. The vulnerability is described as a remote information exposure due to an error response, with affected pro...

Ubuntu 4.10 / 5.04 : squid vulnerability (USN-122-1)

Michael Bhola discovered that errors in the httpaccess configuration, in particular missing or invalid ACLs, did not cause a fatal error. This could lead to wider access permissions than intended by the administrator. Note that Tenable Network Security has extracted the preceding description bloc...

CVE-2005-1345

Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the httpaccess configuration, which could lead to less restrictive ACLs than intended by the administrator...

CVE-2005-1345

CVE-2005-1345 affects Squid up to version 2.5.STABLE9, where missing or invalid http_access ACLs do not trigger a fatal error, potentially allowing broader access than intended. The initial description explicitly notes the ACL error in Squid’s http_access handling. Connected advisories identify a...

CVE-2004-1345

The CVE refers to Sun StorEdge Enterprise Storage Manager (ESM) 2.1 on Solaris 8/9 with an unknown vulnerability that allows local users granted the ESMUser role to escalate to root. The existing sources describe the vulnerability impact as local privilege escalation but do not provide concrete t...

CVE-2003-1345

Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in c:\ via a full pathname in the d parameter...