CVE-1999-1498

Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file...

CVE-1999-1165

GNU fingerd 1.37 is affected. The flaw is failure to drop privileges before accessing user information, enabling local attackers to (1) gain root via a malicious .fingerrc and (2) read arbitrary files via .plan/.forward/.project symbolic links. No patch/version or remediation is specified in the ...

CVE-1999-1165

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to 1 gain root privileges via a malicious program in the .fingerrc file, or 2 read arbitrary files via symbolic links from .plan, .forward, or .project files...

PhpMyExplorer index.php chemin Parameter Encoded Traversal Arbitrary File Access

phpMyExplorer is vulnerable to a directory traversal attack that allows anyone to make the remote web server read and display arbitrary directories. For example: GET /index.php?chemin=..%2F..%2F..%2F..%2F%2Fetc will return the contents of the remote /etc directory. %NASLMINLEVEL 70300 C Tenable...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

Quikstore Shopping Cart quikstore.cgi Multiple Vulnerabilities

The CGI 'quickstore.cgi' is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the HTTP daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10712...

Horde 1.2.x2.1.3 and Imp 2.2.x3.1.2 - File Disclosure

Horde 1.2.x2.1.3 and Imp 2.2.x3.1.2 - File Disclosure source: https://www.securityfocus.com/bid/3067/info A vulnerability has been discovered in Horde Imp which may allow an attacker to access arbitrary system files. The issue occurs due to insufficient sanity checks on user-supplied URI...

PT-2001-2188 · Transsoft · Transsoft Broker

Name of the Vulnerable Software and Affected Versions: Transsoft Broker version 5.9.5.0 Description: The issue allows remote attackers to read arbitrary files and directories. This is achieved by uploading a .lnk link file that points to the target file. There is no information provided about the...

Tarantella Enterprise ttawebtop.cgi pg Parameter Traversal Arbitrary File Access

The 'ttawebtop.cgi' CGI is installed. The installed version is affected by multiple flaws : - It is possible to read arbitrary files from the remote system by including directory traversal strings in the request. - It may be possible for an attacker to execute arbitrary commands with the privileg...

Acme.Serve 1.7 - Arbitrary File Access

Acme.Serve 1.7 - Arbitrary File Access source: https://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a...

Acme.Serve 1.7 - Arbitrary File Access

source: https://www.securityfocus.com/bid/2809/info Acme.Serve is a free, open-source, embeddable webserver written in Java. It is small, is intended to provide minimal functionality, and is fully compatible with JavaServer. Acme.Serve 1.7 comes with a webserver that listens on port 9090. This...

Directory Pro Traversal Arbitrary File Access

The CGI 'directorypro.cgi' is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the HTTP daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

iPlanet Certificate Management Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending /ca/../../ in front on the file name. C Tenable Network Security, Inc. XXX might be redundant with plugin 10589 include"compat.inc"; ifdescription scriptid10683; scriptversion "1.25"; scriptcveid"CVE-2000-1075";...

Cosmicperl Directory Pro 2.0 - Arbitrary File Disclosure

Cosmicperl Directory Pro 2.0 - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/2793/info Webdirectory Pro is a web application used to create a searchable directory of links developed by Cosmicperl. Webdirectory Pro contains an input validation vulnerability which may lead to...

Cosmicperl Directory Pro 2.0 - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/2793/info Webdirectory Pro is a web application used to create a searchable directory of links developed by Cosmicperl. Webdirectory Pro contains an input validation vulnerability which may lead to disclosure of sensitive information to attackers. The val...

A1Stats Multiple Script Traversal Arbitrary File Access

The 'aldisp.cgi' CGI script was found on this system. This script allows an attacker to view any file on the target computer by making a specially crafted GET request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

CVE-2001-0205

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. dot dot attack...

Resin Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending /../../ to the file name. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10656; scriptversion"1.26"; scriptcvsdate"Date: 2018/07/27 18:38:15"; scriptcveid"CVE-2001-0304"; scriptbugtraqid2384;...

CVE-2001-0297

Directory traversal vulnerability in Simple Server HTTPd 1.0 originally Free Java Server allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2001-0294

CVE-2001-0294 affects TYPSoft FTP Server 0.85 with a directory traversal vulnerability. The issue allows remote attackers to read arbitrary files by sending a GET with .. (dot dot) or a CWD with ... in the path. Public details across sources reiterate the vulnerable component and input handling a...