6041 matches found
SHOUTcast server: Multiple vulnerabilities
Background SHOUTcast server is a streaming audio server. Description The SHOUTcast server is vulnerable to a file disclosure when the server receives a specially crafted GET request. Furthermore it also fails to sanitize the input passed to the "Description", "URL", "Genre", "AIM", and "ICQ"...
Webmin 1.290 Usermin 1.220 - Arbitrary File Disclosure (PHP)
Webmin 1.290 Usermin 1.220 - Arbitrary File Disclosure PHP milw0rm.com 2006-07-09...
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
milw0rm.com 2006-07-09...
CentOS 3 / 4 : squirrelmail (CESA-2006:0547)
An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...
RHEL 3 / 4 : squirrelmail (RHSA-2006:0547)
An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...
squirrelmail security update
CentOS Errata and Security Advisory CESA-2006:0547 An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package writt...
Moderate: Red Hat Security Advisory: squirrelmail security update
An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...
FreeBSD : webmin, usermin -- arbitrary file disclosure vulnerability (227475c2-09cb-11db-9156-000e0c2e438a)
The webmin development team reports : An attacker without a login to Webmin can read the contents of any file on the server using a specially crafted URL. All users should upgrade to version 1.290 as soon as possible, or setup IP access control in Webmin. %NASLMINLEVEL 70300 C Tenable Network...
webmin, usermin -- arbitrary file disclosure vulnerability
The webmin development team reports: An attacker without a login to Webmin can read the contents of any file on the server using a specially crafted URL. All users should upgrade to version 1.290 as soon as possible, or setup IP access control in Webmin...
Webmin 'miniserv.pl' Arbitrary File Disclosure
The version of Webmin installed on the remote host is affected by an information disclosure flaw due to a flaw in the Perl script 'miniserv.pl'. This flaw could allow a remote, unauthenticated attacker to read arbitrary files on the affected host, subject to the privileges of the web server user...
aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure
/ Federico Fazzi, [email protected] / aWebNews = 1.0 login.php Remote DocumentRoot file disclosure / 04/06/2006 5:48 login.php: line 64-68, Bug: -- start -- if $GET'page' == "" $pagetogo = "index.php"; else $pagetogo = $GET'page'; -- end -- Proof of concept: Open the browser and go at:...
cms-bandits 2.5 (spaw_root) Remote File Include Vulnerabilities
No description provided by source. Author: Federico Fazzi Contact: [email protected] Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote file disclosure Product: http://sourceforge.net/projects/cms-bandits http://site/cms-bandits/dialogs/td.php?spawroot=evil script...
FreeBSD : phpicalendar -- file disclosure vulnerability (f1f163ce-9e09-11da-b410-000e0c2e438a)
The phpicalendar team reports that there is an unspecified vulnerability within phpicalendar. This seems to be a file disclosure vulnerability caused by improper checking of the template parsing function. This would allow an attacker to disclose any file readable by the user under which the...
FreeBSD : gallery2 -- file disclosure vulnerability (47bdabcf-3cf9-11da-baa2-0004614cc33d)
Michael Dipper wrote : A vulnerability has been discovered in gallery, which allows remote users unauthorized access to files on the webserver. A remote user accessing gallery over the web may use specially crafted HTTP parameters to access arbitrary files located on the webserver. All files...
Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability
Rapid7, LLC Security Advisory Rapid7 Advisory R7-0023 Symantec Scan Engine File Disclosure Vulnerability Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0023.html CVE: CVE-2006-0232 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN FIXED: o...
[SA19444] Sun Cluster SunPlex Manager File Disclosure Vulnerability
TITLE: Sun Cluster SunPlex Manager File Disclosure Vulnerability SECUNIA ADVISORY ID: SA19444 VERIFY ADVISORY: http://secunia.com/advisories/19444/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun Cluster 3.x http://secunia.com/product/2595/...
EV0078.txt
New eVuln Advisory: Quirex Arbitrary File Disclosure Vulnerability http://evuln.com/vulns/78/summary.html --------------------Summary---------------- eVuln ID: EV0078 CVE: CVE-2006-0795 Software: Quirex Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 2.0.2 2.0 and earlier Critical...
[eVuln] Quirex Arbitrary File Disclosure Vulnerability
New eVuln Advisory: Quirex Arbitrary File Disclosure Vulnerability http://evuln.com/vulns/78/summary.html --------------------Summary---------------- eVuln ID: EV0078 CVE: CVE-2006-0795 Software: Quirex Sowtware's Web Site: http://www.teca-scripts.com/ Versions: 2.0.2 2.0 and earlier Critical...
[SA18924] PerlBLOG Multiple Vulnerabilities
TITLE: PerlBLOG Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18924 VERIFY ADVISORY: http://secunia.com/advisories/18924/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: PerlBLOG 1.x http://secunia.com/product/8128/ DESCRIPTION: Aliaksand...
[SA18926] Quirex convert.cgi File Disclosure Vulnerability
TITLE: Quirex convert.cgi File Disclosure Vulnerability SECUNIA ADVISORY ID: SA18926 VERIFY ADVISORY: http://secunia.com/advisories/18926/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: Quirex 2.x...