190 matches found
Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability
Title: Apache Tomcat Directory Traversal Vulnerability Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote File Disclosure Vulnerable Version: prior to 6.0.18 Solution: - Best Choice: Upgrade to 6.0.18 http://tomcat.apache.org - Hot fix: Disable allowLinking ...
Apache Tomcat UTF-8目录遍历漏洞
BUGTRAQ ID:30633 CVE ID：CVE-2008-2938 CNCVE ID：CNCVE-20082938 Apache Tomcat是一款流行的开放源码的JSP应用服务器程序。。 Apache Tomcat不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB服务程序上下文查看任意本地文件。 此漏洞发生是由于JAVA处理输入存在问题，如果context.xml或server.xml允许'allowLinking'和'URIencoding'为'UTF-8'，攻击者可以以WEB权限获得重要的系统文件内容。 Apache Software Foundation Tomca...
CVE-2008-2938
creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6229 2010-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14489 2018-05-29 15:50:33+00:00| seen|...
Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability
No description provided by source. Title: Apache Tomcat Directory Traversal Vulnerability Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote File Disclosure Vulnerable Version: prior to 6.0.18 Solution: - Best Choice: Upgrade to 6.0.18 http://tomcat.apache.o...
CVE-2006-2938
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2937. Reason: This candidate was withdrawn by its CNA. it was incorrectly used to identify CVE-2006-2937. Notes: none...
CVE-2006-2938
CVE-2006-2938 is rejected/not used and does not represent an active vulnerability entry.
CVE-2007-2938
The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...
CVE-2005-2938
CVE-2005-2938 affects Apple iTunes for Windows (iTunesHelper.exe) prior to iTunes 6. The vulnerability is an unquoted Windows search path in iTunesHelper.exe, which could allow a local user to gain privileges by placing a malicious C:\program.exe. Affected versions include iTunes 4.7.1.30 and iTu...
APPLE-SA-2005-11-15 iTunes 6 for Windows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2005-11-15 iTunes 6 for Windows CVE-ID: CVE-2005-2938 Available for: Microsoft Windows XP and Microsoft Windows 2000 Impact: iTunes 5 for Windows may launch the wrong helper program Description: Due to the way iTunes 5 for Windows launches it...