EUVD-2004-1543

Malware in sbrugna...

EUVD-2004-1541

Malware in sbrugna...

EUVD-2004-1542

Malware in sbrugna...

CVE-2004-2616

The CVE-2004-2616 entry concerns the file server in ActivePost Standard 3.1 and earlier. Affected software : ActivePost Standard (versions up to 3.1). Vulnerability : remote authenticated users can upload a file and obtain sensitive information; a success message reveals the path, indicating info...

CVE-2004-2616

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message...

CVE-2004-2616: Undefined Security Weakness

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message...

CVE-2004-1547

CVE-2004-1547 affects ActivePost Standard 3.1 and earlier. The file server allows remote authenticated users to cause a denial of service (application crash) by supplying a long filename, with the description noting a possible buffer overflow as the underlying issue. The available documents do no...

CVE-2004-1548

Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. dot dot in the filename...

CVE-2004-1547

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service application crash via a long filename, possibly triggering a buffer overflow...

CVE-2004-1548

The CVE-2004-1548 entry concerns ActivePost Standard 3.1, specifically a Directory traversal vulnerability in its file server. Remote authenticated users can upload arbitrary files by manipulating the filename with a .. (dot dot) sequence. The provided documents describe the vulnerability vector ...

CVE-2004-1549: Undefined Security Weakness

The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection...

CVE-2004-1547: Undefined Security Weakness

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service application crash via a long filename, possibly triggering a buffer overflow...

CVE-2004-1548: Undefined Security Weakness

Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. dot dot in the filename...

CVE-2004-1547

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service application crash via a long filename, possibly triggering a buffer overflow...

CVE-2004-1548

Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. dot dot in the filename...

CVE-2004-2616

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message...

CVE-2004-1549

The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection...

Multiple vulnerabilities in ActivePost Standard 3.1

Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...