3991 matches found
iDEFENSE Security Advisory 2003-05-22.t
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 05.22.03: http://www.idefense.com/advisory/05.22.03.txt Authentication Bypass in iisPROTECT May 22, 2003 I. BACKGROUND iisPROTECT is designed to provide password protection to web directories similar to the htaccess method...
CVE-2002-0531
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...
Oracle9i Application Server 9.0.2 - MOD_ORADAV Access Control
source: https://www.securityfocus.com/bid/14274/info The modoradav module for Oracle HTTP Server included in Oracle9i Application Server is prone to a vulnerability. This is related to access controls on the '/davpublic' and '/davportal' directories, allowing a malicious user to fill up the...
CVE-2002-1863
Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...
PT-2002-2814 · Hellbent · Hellbent
Name of the Vulnerable Software and Affected Versions: hellbent version 01 Description: The issue allows remote attackers to determine the full path of the web root directory. This is achieved by sending a GET request with a relative path that includes the root's parent. If the parent is incorrec...
PT-2002-2435 · Mandrake · Mandrake
Name of the Vulnerable Software and Affected Versions: Mandrake versions 8.2 Description: The Standard security setting for the Mandrake-Security package installs home directories with world-readable permissions. This could allow local users to read other users' files. Recommendations: For Mandra...
SUIDPerl 5.6 - Information Disclosure
SUIDPerl 5.6 - Information Disclosure source: https://www.securityfocus.com/bid/6282/info An information disclosure vulnerability has been reported for SuidPerl. Reportedly, it is possible for an attacker to determine whether files exist in non-accessible directories. An attacker can exploit this...
SUIDPerl 5.6 - Information Disclosure
source: https://www.securityfocus.com/bid/6282/info An information disclosure vulnerability has been reported for SuidPerl. Reportedly, it is possible for an attacker to determine whether files exist in non-accessible directories. An attacker can exploit this vulnerability by invoking suidperl wi...
CoolForum v 0.5 beta shows content of PHP files
CoolForum v 0.5 beta shows content of PHP files The original document can be found at http://www.securiteinfo.com/attaques/hacking/coolforum05.shtml .oO Overview Oo. CoolForum v 0.5 beta shows PHP content files Discovered on 2002, September, 16th Vendor: http://www.coolforum.net CoolForum v 0.5 i...
CVE-2002-1083
Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to 1 create directories using the Maintain Images:Add New:Create Subdirectory item, or 2 list directories using the Maintain Images file listing, via .. dot dot sequences...
CVE-2002-1083
CVE-2002-1083 (ezContents) : A directory traversal vulnerability affects ezContents 1.41 and earlier. The issue allows remote attackers to trigger filesystem access through directory traversal sequences (".."), enabling (1) creation of subdirectories via the Maintain Images:Add New:Create Subdire...
CVE-2002-0775
CVE-2002-0775: The browse.asp component in Hosting Controller is vulnerable to a directory traversal flaw via the FilePath parameter, allowing remote attackers to view arbitrary directories. This affects the ability to access non-authorized file paths and partially impacts confidentiality. The do...
CVE-2002-0558
Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...
CVE-2002-0479
Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...
CVE-2002-0558
TYPSoft FTP Server is affected by a directory traversal flaw in versions 0.97.1 and earlier, allowing a remote authenticated (or possibly anonymous) user to list arbitrary directories via a LIST command using .. with a wildcard. The root cause is a traversal vulnerability in the LIST handling (an...
CVE-2002-0558
Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user possibly anonymous to list arbitrary directories via a .. in a LIST ls command ending in wildcard . characters...
apache + .htpasswd - bypass pwd check
Hi yesterday I managed to bypass the pwd check when using .htpasswd. The problem now is that Im not sure how to secure it. Okej let say that user ivan have protected his /home/ivan/publichtml/topsecret directory. And on the samer server we have the user johan, from his publichtml directory we mak...
SSH2 3.0 - Restricted Shell Escape (Command Execution)
SSH2 3.0 - Restricted Shell Escape Command Execution source: https://www.securityfocus.com/bid/4547/info SSH and derivatives is the protocol Secure Shell protocol implementation. It is available for various operating systems, although this vulnerability affects operating systems such as Unix and...
SSH2 3.0 - Restricted Shell Escape (Command Execution)
source: https://www.securityfocus.com/bid/4547/info SSH and derivatives is the protocol Secure Shell protocol implementation. It is available for various operating systems, although this vulnerability affects operating systems such as Unix and Linux. It has been reported that it is possible for a...