CVE-2003-0052: Undefined Security Weakness

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories...

CVE-2003-0055: Undefined Security Weakness

Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...

CVE-2003-0053: Undefined Security Weakness

Cross-site scripting XSS vulnerability in parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message...

CVE-2003-0426

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0676

CVE-2003-0676 : A directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (Sun ONE) allows remote attackers to read arbitrary files via partially encoded dot-dot sequences ("..%2f"). The information available confirms the affected component and the underlying issue is a...

CVE-2003-0676: Undefined Security Weakness

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

iPlanet Administration Server directory traversal

Directory traversal during log view with 2f...

Directory Traversal in Sun iPlanet Administration Server 5.1

Text of original posting to Sun: Originator: EDS Information Assurance Group - Jim Hardisty, Mark Brewis Date of Contact: 22nd April 2003 Issue:During a recent Penetration Test, a member of the team, Jim Hardisty, identified an issue with an installation of iPlanet Administration Express. It is...

Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature...

CVE-2003-0219: Undefined Security Weakness

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server...

CVE-2002-0665

CVE-2002-0665 : Macromedia JRun Administration Server has a login-bypass flaw where an extra slash in the URL allows remote attackers to bypass authentication. The entry is high severity (CVSS 2.0 base score 10.0, NETWORK attack vector, no authentication). Public technical details such as affecte...

CVE-2002-0665: Undefined Security Weakness

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash / in the URL...

CVE-2002-1785

Cross-site scripting XSS vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi...

[SECURITY] [DSA 185-1] New heimdal packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 185-1 [email protected] http://www.debian.org/security/ Martin Schulze October 31st, 2002 http://www.debian.org/security/faq -...

CVE-2002-0763

Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server...

CVE-2002-0763

The CVE-2002-0763 entry documents a vulnerability in the administration server of HP VirtualVault 4.5 on HP-UX 11.04. The issue permits remote web servers or privileged external processes to bypass access restrictions and establish connections to the HP VirtualVault server. Affected component is ...

CVE-2002-0763: Undefined Security Weakness

Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...