CVE-2005-1354

The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2002-1354

The CVE-2002-1354 entry concerns a directory traversal vulnerability in TYPSoft FTP Server 0.99.8. The flaw allows local users to list contents of arbitrary directories by abusing the cd/CWD command (dot dot dot). Affected software: TYPSoft FTP Server 0.99.8. Root cause: improper handling of dire...

CVE-2004-1354

CVE-2004-1354 affects the Solaris Management Console (SMC) in Sun Solaris 8 and 9. The issue arises because SMC generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive informa...

CVE-2004-1354

The Solaris Management Console SMC in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal .. atta...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

CVE-2002-1354

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...

CVE-2001-1354

The CVE-2001-1354 entry concerns the NetWin Authentication module (NWAuth) versions 2.0 and 3.0b, as implemented in SurgeFTP and DMail (and possibly other packages). The root cause is weak password hashing used by NWAuth, which could enable local users to decrypt stored passwords or to log in wit...

CVE-2001-1354

NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...

CVE-1999-1354

The CVE-1999-1354 entry affects Softarc FirstClass Internet Server (5.506 and earlier). The exposed issue is that usernames and passwords are stored in cleartext in specific files: home.fc (version 5.506), network.fc (version 3.5), or FCCLIENT.LOG when logging is enabled. This document base state...

CVE-2001-1354

NetWin Authentication module NWAuth 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password...

CVE-1999-1354

E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files 1 home.fc for version 5.506, 2 network.fc for version 3.5, or 3 FCCLIENT.LOG when logging is enabled...