3662 matches found
CVE-2000-0191
The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...
CVE-1999-0927
NTMail is affected by CVE-1999-0927; remote attackers can read arbitrary files via a directory traversal (..). The provided documents do not include remediation or version-specific details.
CVE-2000-0660
CVE-2000-0660 affects the WDaemon web server for WorldClient 2.1, allowing remote attackers to read arbitrary files through a directory-traversal (..). The underlying issue is improper handling of path components, enabling unauthorized file access. Exploitation details are not provided in the CVE...
CVE-2000-0318: Undefined Security Weakness
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...
CVE-2000-0705: Undefined Security Weakness
ntop running in web mode allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0660: Undefined Security Weakness
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-1999-0927: Undefined Security Weakness
NTMail allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0443: Undefined Security Weakness
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0282: Undefined Security Weakness
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...
CVE-2000-0191: Undefined Security Weakness
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...
CVE-2000-0782: Undefined Security Weakness
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0634: Undefined Security Weakness
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0664: Undefined Security Weakness
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack that uses the %2E URL encoding for the dots...
CVE-2000-0686
Auction Weaver CGI script 1.03 and earlier is affected by a traversal flaw that lets remote attackers read arbitrary files through a .. attack in the fromfile parameter. Affected product: Auction Weaver LITE (1.0–1.04) per historical advisories; impact is remote file disclosure. Patch available: ...
CVE-2000-0687: Undefined Security Weakness
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the catdir parameter...
AnalogX "SimpleServer:WWW" dot dot bug
Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...
FS-072600-8-ANA.txt
Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...
CVE-2000-0174
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0526
MailStudio 2000 (mailview.cgi) 2.0 and earlier is affected by CVE-2000-0526 via a directory traversal (.. ) attack that allows remote attackers to read arbitrary files. The vulnerability targets the mailview.cgi CGI program and results in partial confidentiality impact. The provided documents do ...
