Ruby Safe Level security bypass

"alias" can be exploited to replace safe function, directory access protection bypass. Few potentially dangerous methods are not limited...

[SA20168] Solaris in.ftpd Directory Access Restriction Bypass Vulnerability

TITLE: Solaris in.ftpd Directory Access Restriction Bypass Vulnerability SECUNIA ADVISORY ID: SA20168 VERIFY ADVISORY: http://secunia.com/advisories/20168/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ DESCRIPTION...

The third trick is to determine the WWW service type-bug warning-the black bar safety net

Invasion of the target before there is a analysis target host stage, so now on to talk about the invasion front of the server is to how to analysis each other-that is, pre-invasion information gathering, of course, gathering the information, the more detailed the help the better, although now som...

Directory traversal

Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory...

LDAP Server Detection

The remote host is running a Lightweight Directory Access Protocol LDAP server. LDAP is a protocol for providing access to directory services over TCP/IP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20870; scriptversion"1.18";...

MyCO multiple vulnerabilities

MyCO multiple vulnerabilities Software: MyCO guestbook 1.0 www.punctweb.com Credit: Revnic Vasile [email protected] Description: MyCO is a PHP guestbook that uses a MySQL database Vulnerability: the /admin directory is accessible by everyone. XSS can be injected into the field "Name" when...

CVE-2006-0370

RCBlog 1.03 is affected by CVE-2006-0370 due to insufficient access control that allows remote attackers to view account names and MD5 password hashes by accessing data and config directories under the web root. OpenVAS/Nessus entries corroborate a related directory traversal/vector in RCBlog’s P...

Ubuntu 4.10 / 5.04 : php4 vulnerability (USN-207-1)

A bug has been found in the handling of the openbasedir directive handling. Contrary to the specification, the value of openbasedir was handled as a prefix instead of a proper directory name even if it was terminated by a slash '/'. For example, this allowed PHP scripts to access the directory...

CVE-2004-2638

The CVE-2004-2638 vulnerability affects osCommerce 1.5.1 via the Admin Access With Levels plugin. The issue allows remote attackers to access files in the admin/ directory by setting in_login to a non-zero value, enabling partial confidentiality and integrity impact. No exploitation details or sp...

/doc directory browsable

The /doc directory is browsable. /doc shows the content of the /usr/doc directory and therefore it shows which programs and - important! - the version of the installed programs. SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and ar...

directory.php

The SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11017";...

CVE-2005-3054

fopenwrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the openbasedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original...

rdiff-backup protection bypass

Directory access restrictions do not work...

[SA16774] rdiff-backup "--restrict" Security Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-2336

Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server...

YaPiG 0.9x - 'upload.php' Directory Traversal

source: https://www.securityfocus.com/bid/13877/info YaPiG is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An authorized user can add and delete arbitrary directories outside of the gallery directory by...

YaPiG 0.9x - upload.php Directory Traversal

YaPiG 0.9x - upload.php Directory Traversal source: https://www.securityfocus.com/bid/13877/info YaPiG is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An authorized user can add and delete arbitrary...

security flaw

Multiple unknown vulnerabilities in the 1 AIM, 2 LDAP, 3 FibreChannel, 4 GSMMAP, 5 SRVLOC, and 6 NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service crash...

CVE-2005-0685

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

Foxmail 1.1.0.1 POP3 Temp Dir Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ==================================================== Foxmail 1.1.0.1 POP3 Temp Dir Stack Overflow Exploit ==================================================== include include include include pragma comment lib,"ws232" define PORTOFFSET 118...