CVE-2004-2227

CVE-2004-2227 affects Mozilla Firefox prior to 1.0. The issue is in the file download dialog where long filenames are truncated, which can mislead users into downloading files with dangerous extensions. The documented remediation is to upgrade to Mozilla Firefox 1.0 or newer (and related Firefox/...

CVE-2004-2227

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions...

FreeBSD : trac -- file upload/download vulnerability (b02c1d80-e1bb-11d9-b875-0001020eed82)

Stefan Esser reports : Trac's wiki and ticket systems allows to add attachments to wiki entries and bug tracker tickets. These attachments are stored within directories that are determined by the id of the corresponding ticket or wiki entry. Due to a missing validation of the id parameter it is...

FreeBSD : egroupware -- arbitrary file download in JiNN (39953788-6bbb-11d9-8bc9-000a95bc6fae)

eGroupWare contains a bug in the JiNN component that allows a remote attacker to download arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidri...

eRoom 6.0 PlugIn - Insecure File Download Handling

source: https://www.securityfocus.com/bid/14176/info The eRoom plug-in is prone to an insecure file download handling vulnerability. The issue is due to a design fault, where files that are shared by users are apparently passed to default file handlers when downloaded. This can occur without user...

eRoom 6.0 PlugIn - Insecure File Download Handling

eRoom 6.0 PlugIn - Insecure File Download Handling source: https://www.securityfocus.com/bid/14176/info The eRoom plug-in is prone to an insecure file download handling vulnerability. The issue is due to a design fault, where files that are shared by users are apparently passed to default file...

raidenftpdTraverse.txt

Product : RaidenFTPD Affected Versions : quote site urlget file://..\boot.ini 550 site urlget failed : hacking attempt , you have been logged. ftp quote site urlget file:/..\boot.ini 220 site urlget : downloading file:/..\boot.ini-boot.ini ftp ls 200 Port command ok. 150 Opening ASCII data...

PHP-Fusion <= 6.00.105 Accessible Database Backups Download Exploit

No description provided by source. !/usr/bin/perl D A R K A S S A S S I N S C R E W 2 0 0 5 Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins phpfusiondb.pl; Version 0.1 22/06/05 PHP-Fusion db backup proof-of-concept by Easyex Database backup vuln in...

CVE-2005-1994

Finjan SurfinGate 7.0SP2/SP3 is affected by CVE-2005-1994. The vulnerability allows remote attackers to download blocked files by supplying hex-encoded characters in a filename (demonstrated with "%2e"). The reported impact is partial confidentiality, with no documented integrity/availability imp...

JBoss 3.x4.0.2 - HTTP Request Remote Information Disclosure

JBoss 3.x4.0.2 - HTTP Request Remote Information Disclosure source: https://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplie...

JBoss 3.x/4.0.2 - HTTP Request Remote Information Disclosure

source: https://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplied request data. Information that attackers can harvest throu...

URL-Encoding Problem in Finjan SurfinGate

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUMMARY - ------- The Finjan SurfinGate use web content filtering and internet access management for protecting the network. A vulnerability in the product allows you to bypass the access management. You can download files which are normally blocked...

CVE-2004-2083

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."...

CVE-2004-2083

Summary: Opera Web Browser 7.0–7.23 is affected by a file-download extension spoofing flaw. When a malicious site provides a downloadable file, the filename may embed a CLSID that makes the file appear as a trusted type, tricking users into executing it. This can lead to arbitrary code execution ...

CVE-2005-1575

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160...

CVE-2005-1576

Affected software: Mozilla Firefox on Windows (versions 0.10.1 and 1.0). Vulnerability: The file download dialog uses the Content-Type HTTP header to determine file type, but when selecting “Save to Disk,” it preserves the original file extension, allowing remote attackers to mask the true file t...

CVE-2005-1575

The CVE-2005-1575 issue concerns Mozilla Firefox for Windows (versions 0.10.1 and 1.0) where the file download dialog could misrepresent a file’s type. The root cause described across connected records is that a malicious HTTP Content-Type header combined with a filename containing whitespace, do...

CVE-2005-1575

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160...

CVE-2005-1576

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files...

CVE-2004-1887

CVE-2004-1887 affects Ada Image Server (ImgSvr) 0.4. The vulnerability allows remote attackers to view directories or download files by making an HTTP request with a trailing %00 (null). The NVD entry notes a network attack vector with low complexity and no authentication required, resulting in p...