398 matches found
Portcullis Security Advisory 06-034
Portcullis Security Advisory 06-034 Vulnerable System: Movable Type Vulnerability Title: The blog directory path can be set to any arbitrary directory path during the creation of new blogs. Vulnerability discovery and development: Portcullis Security Testing Services. Credit for Discovery: Tim...
Exponent CMS 0.96.50.96.6 - iconspopup.php?icodir Traversal Arbitrary Directory Listing
Exponent CMS 0.96.50.96.6 - iconspopup.php?icodir Traversal Arbitrary Directory Listing source: https://www.securityfocus.com/bid/23574/info Exponent CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these...
Portcullis Security Advisory - Movable Type
Portcullis Security Advisory Tim Brown [email protected] - www.portcullis-security.com [email protected] - www.nth-dimension.org.uk Vulnerable System: Movable Type Vulnerability Title: Username and password hash for administration interface stored in cookie. Vulnerability...
Dovecot Multiple Command Traversal Arbitrary Directory Listing
The remote host is running Dovecot, an open source IMAP4 / POP3 server for Linux / Unix. The version of Dovecot installed on the remote host fails to filter directory traversal sequences from user-supplied input to IMAP commands such as LIST and DELETE. An authenticated attacker may be able to...
timobraun Dynamic Galerie 1.0 - index.php?pfad Arbitrary Directory Listing
timobraun Dynamic Galerie 1.0 - index.php?pfad Arbitrary Directory Listing source: https://www.securityfocus.com/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properl...
321soft PHP-Gallery 0.9 - 'index.php?path' Arbitrary Directory Listing
source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabiliti...
ImageVue 0.16.1 - readfolder.php?path Arbitrary Directory Listing
ImageVue 0.16.1 - readfolder.php?path Arbitrary Directory Listing source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content...
Ubuntu 4.10 / 5.04 : gzip vulnerabilities (USN-116-1)
Imran Ghory discovered a race condition in the file permission restore code of gzip and gunzip. While a user was compressing or decompressing a file, a local attacker with write permissions in the directory of that file could replace the target file with a hard link. This would cause gzip to...
Directory traversal
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...
CVE-2006-0090
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...
CVE-2006-0090
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...
Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)
A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...
CVE-2005-1229
CPIO (GNU cpio) prior to version 2.6 is affected by CVE-2005-1229, a directory-traversal flaw that lets an attacker write to arbitrary directories during extraction via a .. path in an archive. The root cause is that cpio does not sanitise extracted paths (even with --no-absolute-filenames). Cons...
CVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...
STG Security Advisory 2005-01-20.24
STG Security Advisory: SSA-20050120-24 GForge 3.x directory traversal vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== GForge is a software to help collaborative development for software...
gforge -- directory traversal vulnerability
An STG Security Advisory reports: GForge CVS module made by Dragos Moinescu and another module made by Ronald Petty have a directory traversal vulnerability. ... malicious attackers can read arbitrary directory lists...
getmail -- symlink vulnerability during maildir delivery
David Watson reports a symlink vulnerability in getmail. If run as root not the recommended mode of operation, a local user may be able to cause getmail to write files in arbitrary directories via a symlink attack on subdirectories of the maildir...
TYPSoft FTP Server LIST Command Traversal Arbitrary Directory Listing
Using 'cd ...', it is possible to move from the FTP server root directory and access any file on the remote machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: From: [email protected] To: [email protected] Date: 18 Dec 2002 00:40:44 +0200 Subject: NT TYPSoft FTP Serve...