487 matches found
CVE-2005-1228
Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. dot dot in the original filename within a compressed file...
CVE-2005-1229
Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. dot dot in a cpio file...
CVE-2005-1229
Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. dot dot in a cpio file...
CVE-2005-1229
Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. dot dot in a cpio file...
CVE-2005-1228
Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. dot dot in the original filename within a compressed file...
CVE-2005-1228
Summary: CVE-2005-1228 and CAN-2005-0988 affect gzip up to 1.3.5. Two issues: (1) -N option path traversal can cause arbitrary file creation/overwrite in directories; (2) a permission/ownership race during decompression can allow a local attacker to modify permissions or replace files with linked...
CVE-2005-1229
Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. dot dot in a cpio file...
CVE-2005-1228
Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. dot dot in the original filename within a compressed file...
CVE-2002-1354
Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...
CVE-2004-1670
Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to 1 create arbitrary directories via a .. dot dot in the user parameter to viewaction.html or 2 rename arbitrary files via a ....// doubled dot do...
CVE-2004-1543
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories via a .. dot dot in the path parameter...
CVE-2005-0299
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in the 1 dir parameter to controller.php or 2 dirname parameter to controlleroo.php...
CVE-2004-2458
Open WebMail 2.30 and earlier, when usesyshomedir is disabled or createsyshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories...
CVE-2004-2222
Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary directories via the dir parameter...
CVE-2004-1217
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...
TCLhttpd 3.4.2 - Directory Listing Disclosure
TCLhttpd 3.4.2 - Directory Listing Disclosure source: https://www.securityfocus.com/bid/8687/info It has been reported that a vulnerability present in TCLHttpd allows for attackers to view the contents of arbitrary directories on affected web servers. According to the report, the input validation...
TCLhttpd 3.4.2 - Directory Listing Disclosure
source: https://www.securityfocus.com/bid/8687/info It has been reported that a vulnerability present in TCLHttpd allows for attackers to view the contents of arbitrary directories on affected web servers. According to the report, the input validation implemented to protect against this is...
CVE-2003-0392
Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument e.g. E:...
CVE-2003-0392
Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument e.g. E:...
CVE-2003-0392
The CVE-2003-0392 entry concerns ST FTP Service 3.0, where a vulnerability in the CD command handling enables directory traversal. An attacker can cause the server to list arbitrary directories by supplying a drive-letter argument (for example, CD E:), potentially exposing files outside the FTP j...