CVE-2006-0890

CVE-2006-0890 describes a directory traversal vulnerability in SpeedProject Squeez 5.1, used by ZipStar 5.1 and SpeedCommander 11.01.4450. The flaw allows remote attackers to overwrite arbitrary files via unspecified manipulations in a (1) JAR or (2) ZIP archive. The underlying issue is a directo...

CVE-2006-0513

Concrete details: CVE-2006-0513 affects IBM Tivoli Access Manager Web Server Plug-in (pkmslogout) on TAM 5.1.0.x. The vulnerability is a directory traversal in the filename parameter (e.g., filename=../../../../etc/passwd) that lets an attacker read arbitrary files, requiring authentication to tr...

CVE-2005-4068

Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors...

CVE-2005-4068

Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors...

VERITAS NetBackup Volume Manager Daemon buffer overflow

Added: 12/04/2005 CVE: CVE-2005-3116 BID: 15353 OSVDB: 20674 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The Volume Manager Daemon VMD has an error in its shared library allowing for a buffer overflow. A specially crafted request sent to port...

Cumulative Patch for Internet Information Services (Q327696)

Cumulative Patch for Microsoft IIS Q327696 Impact of vulnerability: Ten new vulnerabilities, the most serious of which could enable code of an attacker's choice to be run on a server. Recommendation: Users using any of the affected products should install the patch immediately. Maximum Severity...

Microsoft Internet Information Services (IIS) Multiple Vulnerabilities (Q327696, MS02-062)

Microsoft Internet Information Services IIS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IIS 5.1 SP2 Detection (English Versions Only)

Binary data 3213.prm...

ASP/ASA Source Using Microsoft Translate f: bug (IIS 5.1)

Binary data 3212.prm...

Microsoft IIS Translate f: ASP/ASA Source Disclosure (IIS 5.1)

There is a serious vulnerability in IIS 5.1 that allows an attacker to view ASP/ASA source code instead of a processed file, when the files are stored on a FAT partition. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. %NASLMINLEVEL 70300 C...

IIS 5.1 SP0 Detection (English Versions Only)

Binary data 3214.prm...

IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV

It is possible to remotely view the source code of web script files though a specially crafted WebDAV HTTP request. Only IIS 5.1 seems to be vulnerable. The web script file must be on a FAT or a FAT32 volume, web scripts located on NTFS volumes are not vulnerable. Confirmed vulnerable -Microsoft®...

Microsoft IIS 5.1 source code leak

Special WebDAv request to script located at FAT volume allows to retrieve source code...

IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV

It is possible to remotely view the source code of web script files though a specially crafted WebDAV HTTP request. Only IIS 5.1 seems to be vulnerable. The web script file must be on a FAT or a FAT32 volume, web scripts located on NTFS volumes are not vulnerable. Confirmed vulnerable -Microsoft®...

Microsoft IIS 5.1 - WebDAV HTTP Request Source Code Disclosure

Microsoft IIS 5.1 - WebDAV HTTP Request Source Code Disclosure source: https://www.securityfocus.com/bid/14764/info Microsoft IIS is reportedly affected by a remote script source disclosure vulnerability. A successful attack causes the Web server to present the requested file as a plain text file...

CVE-2001-1580

Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string...

CVE-2001-1580

CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...

CVE-2005-2389

The CVE-2005-2389 entry concerns the NDMP server in Veritas NetBackup 5.1. Affected component: NetBackup NDMP server. Vulnerable condition: processing a CONFIG message with an out-of-range timestamp leads to a null dereference, causing denial of service (availability impact). No exploitation deta...

[Full-disclosure] VERITAS NETBACKUP 5.1 'TIME_STAMP' VULNERABILITY

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Update: Contact as finally been ok thanx secfocus and hotfix probably coming soon. VERITAS NETBACKUP 5.1 'TIMESTAMP' VULNERABILITY Date: 07/2005 Risk: Low/Medium Soft: NetBackup 5.1 OS : All supported win32 Fix : coming soon I. VULNERABILITY NETBACKUP...

CVE-2002-1717

Microsoft Internet Information Server IIS 5.1 allows remote attackers to view path information via a GET request to 1 /vtipvt/access.cnf, 2 /vtipvt/botinfs.cnf, 3 /vtipvt/bots.cnf, or 4 /vtipvt/linkinfo.cnf...