1741 matches found
CVE-2004-1572
AJ-Fork 167 is vulnerable to an information-disclosure flaw where access to directories (data, inc, plugins, skins, tools) is not restricted, enabling remote attackers to list files via direct HTTP requests. The CVE-2004-1572 entry documents this risk, with impact limited to exposure of directory...
CVE-2004-1572
AJ-Fork 167 does not restrict access to directories such as 1 data, 2 inc, 3 plugins, 4 skins, or 5 tools, which allows remote attackers to list files in those directories via a direct HTTP request...
CVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...
Samba < 3.0.10 Directory Access Control List Remote Integer Overflow
Binary data 2463.prm...
CVE-2004-0297
Buffer overflow in the Lightweight Directory Access Protocol LDAP daemon iLDAP.exe 3.9.15.10 in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service crash and execute arbitrary code via an LDAP message with a large tag length...
Samba DoS
Accessing directory with large number of '' in the name lead to smbd CPU exhastion...
Debian DSA-457-1 : wu-ftpd - several vulnerabilities
Two vulnerabilities were discovered in wu-ftpd : - CAN-2004-0148 Glenn Stewart discovered that users could bypass the directory access restrictions imposed by the restricted-gid option by changing the permissions on their home directory. On a subsequent login, when access to the user's home...
Serv-U < 2.5i CD Command Traversal Directory / File Access
Binary data 1838.prm...
Mandrake Linux Security Advisory : unzip (MDKSA-2003:073-1)
A vulnerability was discovered in unzip 5.50 and earlier that allows attackers to overwrite arbitrary files during archive extraction by placing non-printable characters between two '.' characters. These invalid characters are filtered which results in a '..' sequence. The patch applied to these...
Network Administrator protection bypass
It's possible to access protected directory by using environment variables...
imgSvr.txt
Donato Ferrante Application: imgSvr http://adaimgsvr.sourceforge.net/ Version: 0.4 Bug: Index viewing Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3. The code ...
CVE-2004-0281
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows...
WU-FTPD restricted-gid Directory Access Restriction Bypass
The remote host is running wu-ftpd 2.6.2 or older. There is a bug in this version which may allow an attacker to bypass the 'restricted-gid' feature and gain unauthorized access to otherwise restricted directories. Nessus solely relied on the banner of the remote FTP server, so this might be a...
[Full-Disclosure] [SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 457-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 8th, 2004 http://www.debian.org/security/faq -...
DSA-457 wu-ftpd - several vulnerabilities
Bulletin has no description...
CVE-2004-0061
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...
CVE-2004-0061
CVE-2004-0061 affects WWW File Share Pro 2.42 and earlier . It allows remote attackers to bypass directory access restrictions by using a URL with a trailing dot or a URI beginning with a slash or backslash. The impact described is partial disclosure/integrity/availability with a network attack v...
Security bug in Xerox Document Centre
CONTACT INFORMATION =============================================================================== Name : J.A. Gutierrez E-mail : [email protected] Reported this to the vendor on Mon Dec 15 2003 using feedback form at http://www.xerox.com, since I couldn't find a security contact. TECHNICA...
MDKSA-2003:112-1 - Updated cvs packages fix malformed module request vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: cvs Advisory ID: MDKSA-2003:112-1 Date: December 10th, 2003 Original Advisory Date: December 8th, 2003 Affected versions: 9.1, 9.2 Problem Description: A vulnerability was discovered in the CVS...