tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

java Bridge 5.5 - Directory Traversal

/Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read arbitrary files =...

Apache Tomcat 5.5.x < 5.5.30

According to its self-reported version number, the Apache Tomcat server listening on the remote host is 5.5.x prior to 5.5.30. It is, therefore, affected by multiple vulnerabilities : - An error in the access restriction on a 'ServletContext' attribute which holds the location of the work directo...

RHEL 5 : kernel (RHSA-2010:0178)

Updated kernel packages that fix three security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the fifth regular update. The Red Hat Security Response Team has rate...

dedecms 5.5 procedure leaked site path information-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. Test address: http://www.dedecms.com/plus/paycenter/alipay/returnurl.php http://www.dedecms.com/plus/paycenter/cbpayment/autoreceive.php http://www.dedecms.com/plus/paycenter/nps/configpaynps.php...

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (Metasploit)

$Id: seattlelabpass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

dedecms proof path for the latest vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: dedecms 5.5 procedure leaked site path information. Test address: http://www.dedecms.com/plus/paycenter/alipay/returnurl.php http://www.dedecms.com/plus/paycenter/cbpayment/autoreceive.php http://www.dedecms.com/plus/paycenter/nps/configpaynps.php...

PT-2010-2872 · Apache +1 · Apache Tomcat +1

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.0 through 5.5.29 Apache Tomcat versions 6.0.0 through 6.0.26 Description: The issue allows remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires either...

DeDeCMS 5.5 - _SESSION[dede_admin_id] Authentication Bypass

DeDeCMS 5.5 - SESSIONdedeadminid Authentication Bypass source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the...

CVE-2009-2902

CVE-2009-2902 is a directory traversal vulnerability in Apache Tomcat, affecting 5.5.0–5.5.28 and 6.0.0–6.0.20. The issue allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename (e.g., a crafted entry like ../../... in a WAR). The connected Nessu...

PT-2009-6604 · Mysql Server +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: yaSSL versions prior to 1.9.9 MySQL versions prior to 5.0.90 MySQL versions prior to 5.1.43 MySQL versions 5.5.x through 5.5.0-m2 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service by...

HP OpenView Storage Data Protector备份客户端服务栈溢出漏洞

BUGTRAQ ID: 37396 CVECAN ID: CVE-2007-2280 HP OpenView Storage Data Protector是可扩展的数据管理解决方案，实现基于磁盘或磁带的高性能备份和恢复功能。 OpenView Storage Data Protector默认绑定在TCP 5555端口上的备份客户端服务守护程序（OmniInet.exe）在处理发送给MSGPROTOCOL命令的超长参数时存在栈溢出漏洞，远程攻击者可以通过提交恶意请求触发这个溢出，导致以服务的权限执行任意代码。 HP OpenView Storage Data Protector 6.0 H...

CVE-2009-3855

In the provided documents, CVE-2009-3855 refers to multiple unspecified vulnerabilities in the IBM Tivoli Storage Manager (TSM) backups clients (UNIX/Linux) and the OS/400 API client. Affected versions are TSM 5.3 prior to 5.3.6.6, 5.4 prior to 5.4.2, and 5.5 prior to 5.5.1, with exploitation ass...

JVN#63832775: Apache Tomcat information disclosure vulnerability

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may allow information disclosure or access to the contents contained in the WEB-INF directory. Impact A remote attacker cou...

Magic ISO Maker Buffer Overflow Vulnerability

This host is running Magic ISO Maker and is prone to Heap-Based Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbmagicisomakerbofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Magic ISO Maker Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...

CVE-2009-1056

IBM Rational AppScan Enterprise prior to 5.5 FP1 is affected by CVE-2009-1056, where remote attackers can read arbitrary exported reports by forcefully browsing. Affected software is stated as IBM Rational AppScan Enterprise before 5.5 FP1; root cause is not elaborated beyond the ability to read ...

Elecard MPEG Player Buffer Overflow Vulnerability

This host is running Elecard MPEG Player and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbelecardmpegplayerbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Elecard MPEG Player Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone...

Elecard MPEG Player 5.5 (.m3u File) Stack Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================= Elecard MPEG Player 5.5 .m3u File Stack Buffer Overflow PoC ============================================================= !/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5...

Elecard MPEG Player 5.5 - .m3u Stack Buffer Overflow (PoC)

Elecard MPEG Player 5.5 - .m3u Stack Buffer Overflow PoC !/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5 build 15884.081218 website : http://www.elecard.com/download/index.php Download : http://www.elecard.com/ftp/pub/mpeg/player/EMpgPlayer.zip Type : .M3U Buffer Overflow POC EAX...

Elecard MPEG Player 5.5 - '.m3u' Stack Buffer Overflow (PoC)

!/usr/bin/perl -w Program : Elecard MPEG Player Version : 5.5 build 15884.081218 website : http://www.elecard.com/download/index.php Download : http://www.elecard.com/ftp/pub/mpeg/player/EMpgPlayer.zip Type : .M3U Buffer Overflow POC EAX 00000000 ECX 41414141 EDX 7C9037D8 ntdll.7C9037D8 EBX...