CVE-2007-5685

The safepath function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the...

CVE-2007-5379

CVE-2007-5379 affects Ruby on Rails installations using Rails prior to 1.2.4. The vulnerability stems from Hash.from_xml (Hash#from_xml) using XmlSimple unsafely, enabling remote attackers to determine the existence of arbitrary files and read arbitrary XML files (e.g., passwords from Pidgin .pur...

HP OpenView网络节点管理器远程信息泄露漏洞

HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 HP OpenView实现上存在漏洞，远程非授权用户可能利用此漏洞以NNM服务器的权限读取任意文件。 HP OpenView Network Node Manager 7.50 HP OpenView Network Node Manager 7.01 HP OpenView Network Node Manager 6.4x HP OpenView Network Node Manager 6.20 HP已经为此发布了一个安全公告（HPSBMA02175）以及相应补...

Cisco VPN 3000 Concentrator FTP任意文件访问漏洞

Cisco VPN 3000 Concentrator是一款VPN网络通信解决方案。 Cisco VPN 3000 Concentrator通过FTP进行文件管理时存在问题，远程攻击者可以利用漏洞以FTP服务进程上下文访问任意文件。 Cisco VPN 3000系列可配置使用FTP协议管理存储在集中器上的文件，如配置文件和证书，文件可以被上传或下载。 当FTP起用为文件管理协议时存在两个漏洞，通过执行如下FTP命令可利用这些漏洞： CWD MKD CDUP RNFR SIZE RMD 要查看更详细的漏洞描述，可参考如下链接注册用户可查看：...

CVE-2005-2851

CVE-2005-2851 affects smb4k and related versions prior to 0.6.3, enabling local users to read sensitive files via a symlink attack on temporary files (smb4k.tmp, or sudoers/super.tab). The underlying issue is that Smb4K writes contents to a target file pointed to by an insecure pre-existing symli...

CVE-2005-1305

The CVE-2005-1305 issue affects the hyper.cgi script. It allows remote attackers to read arbitrary files by supplying a full pathname in the argument. NVD lists a base score of 5.0 (Medium) with network attack vector, low complexity, no authentication, and partial confidentiality impact. Exploit ...

artmedic_links5 remote file access exploit

You can read details of this vulnerability here: http://www.securityfocus.com/archive/1/367144 Very simple source of exploit, enjoy. / artmediclinks5 remote file access exploit Adam Simuntis [email protected] / include stdio.h include stdlib.h include arpa/inet.h include sys/types.h include sys/socket.h...

CVE-2005-1241

CVE-2005-1241 describes a directory traversal in the Powertech third‑party tool used with the iSeries AS/400 FTP server, enabling remote access to arbitrary files (including those in qsys.lib) via ".." in GET requests. The initial and connected records present no explicit patch or version details...

CProxy 3.3.x - 3.4.4 Multiple Vulnerabilities

The remote host is running a version of Computalynx's CProxy Server that suffers from the following vulnerabilities: - Arbitrary Local File Access CProxy allows an attacker to retrieve arbitrary local files by issuing an HTTP request with directory traversal sequences relative to a subdirectory...

SUSE-SA:2005:007: mailman

The remote host is missing the patch for the advisory SUSE-SA:2005:007 mailman. Mailman is a flexible mailing list management tool. It provides mail controlled subscription front ends and also includes CGI scripts to handle subscription, moderation and archive retrieval and other options. Due to...

DSA-665-1 ncpfs - missing privilege release

Bulletin has no description...

Simple PHP Blog comments.php Traversal Arbitrary File Access

The remote version of Simple PHP Blog allows for retrieval of arbitrary files from the web server. These issues are due to a failure of the application to properly sanitize user-supplied input data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2004-2683

Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server...

CVE-2004-2684

Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including 1 cache.key and 2 cache.dat, related to .csp files under a Dev\studio\templates and b Devuser\studio\templates...

CVE-2002-1270

Mac OS X 10.2.2 allows local users to read files that only allow write access via the mapfd Mach system call...

CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

AWStats Input Validation Hole in 'logfile'

Exploit for cgi platform in category dos / poc ========================================== AWStats Input Validation Hole in 'logfile' ========================================== Example:...

Opera: Location, Location, Location

GreyMagic Security Advisory GM008-OP ===================================== By GreyMagic Software, 05 Aug 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm008-op/. Topic: Location, Location, Location. Discovery date: 19 Jul 2004. Affected applications:...

[Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier

=========================================================================== =========================================================================== Advisory: 2004-Nuke-001 Affected Software: PHPNuke Affected Versions: Version 7.3 and earlier Main Developer: Francisco Burzi...

CVE-2004-0405

CVE-2004-0405 and related CVEs affect CVS up to version 1.11.x. The Debian/Mandrake/Gentoo/Nessus advisories describe two issues: (1) CVS pserver can be abused to view files outside the repository root by using relative pathnames containing ‘..’ (CVE-2004-0405); (2) CVS servers/clients can simila...