418 matches found
MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access
This web server is running MyServer See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, added VDB refs, changed family 4/20/009 include"compat.inc"; ifdescription scriptid11851; scriptversion "1.16"; scriptcveid"CVE-2004-2516"; scriptbugtraqid11189;...
CVE-2003-0604
Windows Media Player WMP 7 and 8, as running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File://...
[SECURITY] [DSA-352-1] New fdclone packages fix insecure temporary directory usage
-------------------------------------------------------------------------- Debian Security Advisory DSA 352-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 22nd, 2003 http://www.debian.org/security/faq -...
[NT] Moby's Netsuite Directory Traversal Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...
Important: Red Hat Security Advisory: kdebase security update
This erratum provides updated KDE packages to resolve a vulnerability in the handling of PostScript and PDF files. KDE is a graphical desktop environment for the X Window System. KDE versions up to and including KDE 3.1.1 have a vulnerability caused by neglecting to use the -dSAFER option when...
CVE-2003-0116
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal...
Apache < 2.0.44 Illegal Character Default Script Mapping Bypass
The remote host appears to be running a version of Apache for Windows that is older than 2.0.44. Such versions are reportedly affected by a flaw that allows an attacker to read files that they should not have access to by appending special characters to them. C Tenable Network Security, Inc...
Vulnerabilties in Xynph FTP Server 1.0
Vulnerabilties in Xynph FTP Server 1.0 Xynph FTP Server allows Directory Traversal Example: Verbindung mit zero-x. 220 Herzlich Willkommen! -Xynph FTP-Server- Benutzer zero-x:none: anonymous 331 Password required for anonymous. Kennwort: billsucks 230 User anonymous logged in. Ftp pwd 257...
CVE-2002-2033
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character %00...
CVE-2002-0879
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via 1 a .. or 2 a C: style pathname in the FILE parameter...
[security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN SSRT2362 WEBES Service Tools HP Tru64 UNIX, HP OpenVMS, Windows Potential File Access Vulnerability REVISION: 0 ------------------------------------------------------------ NOTICE: There are no restrictions for distribution of this...
[security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability
security bulletin SSRT2362 WEBES Service Tools HP Tru64 UNIX, HP OpenVMS, Windows Potential File Access Vulnerability fwd...
advisory
----------- UkR security team advisory ------------ Dino's WebServer 1.2 directory traversal bug ----------------------------------------------------- Name: Dino's WebServer 1.2 directory traversal bug Date: 28.08.2002 Author: UkR-XblP/ UkR security team/ http://ust.dp.ua Application: Dino's...
CVE-2002-0786
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter...
CVE-2002-0786
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter...
Protected files access in LilHTTP
By using ./ and ../ it's possible to access any files...
CVE-2001-0593
The CVE-2001-0593 entry affects Anaconda Partners Clipper 3.3 and earlier, where a directory traversal via the template parameter allows a remote attacker to read arbitrary files. The vulnerability is rooted in a dot-dot (.. ) path traversal in the template handling, enabling file disclosure with...
ScriptEase:WebServer Edition vulnerability
Program: ScriptEase:WebServer Edition Url: www.nombas.com Problem: Any user can read files on server using one of examle scripts: comment2.jse Systems affected: Linux, Novell Netware, Windows 9x/NT/2k Example: WindowsNovell Netware:...
CVE-2001-0557
T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' dot dot attack which is URL encoded %2e%2e...
CVE-1999-0800
The CVE-1999-0800 issue affects Allaire Forums (2.0.4 and earlier) running in ColdFusion, where GetFile.cfm exposes a FilePath parameter that allows remote attackers to read arbitrary server files (e.g., via http://target/GetFile.cfm?FT=Text&FST=Plain&FilePath=C:\boot.ini). Root cause: GetFile.cf...