Solaris 7.0/8 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution

source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI script included with the CD does not adequately sanitize input. Due to a design failure...

Solaris 7.08 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution

Solaris 7.08 Sunsolve CD - SSCDSunCourier.pl CGI Script Arbitrary Command Execution source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI scri...

CVE-2001-0963

SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...

CVE-2001-0963: Undefined Security Weakness

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... modified dot dot in the CD CWD command...

CVE-2001-0696: Undefined Security Weakness

NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service crash via a CD command to a directory with an MS-DOS device name such as con...

CVE-2001-1031: Undefined Security Weakness

Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via 1 a .. dot dot in the ls/LIST command, or 2 a ... in the cd/CWD command...

CVE-2001-0966: Undefined Security Weakness

Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the CD CWD command...

CVE-1999-1240

Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message...

CVE-1999-1240: Undefined Security Weakness

Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message...

CVE-2001-0694: Undefined Security Weakness

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0688: Undefined Security Weakness

Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD "CD . ." command...

CVE-2001-0582: Undefined Security Weakness

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0480

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0452: Undefined Security Weakness

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0480: Undefined Security Weakness

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...

CVE-2001-0054: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

CVE-2000-0191

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...

CVE-2000-0191

The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...