IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQ...

Crystal Reports Vulnerabilities

Dear List, Impervatm's Application Defense Center has discovered several vulnerabilities in BusinessObject's Crystal Reports' Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a...

IBM Lotus Domino 6/7 - HTTP webadmin.nsf Directory Traversal

source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue reportedly exists in the server's administrative...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

[LSD] Java and JVM security vulnerabilities

We would like to inform you about several security vulnerabilities in Java Virtual Machine implementations that we have found during our research. These vulnerabilities affect at least JVMs used in Netscape Communicator and Microsoft Internet Explorer web browsers. Below you can find their brief...

Opera 7 vulnerabilities

We've done some basic security tests, in cooperation with Tom Gilder, on the new Opera 7 beta release and found two major security vulnerabilities. These vulnerabilities are quite obvious and likely to be discovered by malicious users. Combined, they allow full read access to a victim's file syst...

Directory traversal in Daniel Arenz' Mini Server

Hi! There is a directory traversal flaw in Daniel Arenz' Mini Server 2.1.6 tested on Windows XP Professional. It could be that prior versions are also affected. It's possible to show every by the web server readable file on the target system by using one of the following URLs:...

Phenoelit Advisory #0815 +--

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +-- Authors FX [email protected] FtR [email protected] kim0 [email protected] DasIch [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/HPChai.txt Affected Products Hewlett Packard HP ChaiVM HP 90...

Cobalt Qube 3.0 - Authentication Bypass

Cobalt Qube 3.0 - Authentication Bypass source: https://www.securityfocus.com/bid/5297/info A vulnerability has been reported for Cobalt Qube that may allow an attacker to bypass the authentication mechanism and obtain administrative privileges. The vulnerability occurs because of a weak...

File system access in imap-uw

By design it's possible to access any file readable by user's account...

Portix-PHP 0.4 - view.php Directory Traversal

Portix-PHP 0.4 - view.php Directory Traversal source: https://www.securityfocus.com/bid/4039/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script view.php does not...

Проблемы с Java Plugin 1.4 (file reading)

Апплеты не имеющие корректного сертификата тем не менее могут обращаться к файловой системе...

Проблемы в файловых системах (ufs/ext2fs data recovery)

Локальный пользователь может получить доступ к содержимому файлов, которые были удалены...

eXtropia bbs_forum.cgi 1.0 - Arbitrary Command Execution

eXtropia bbsforum.cgi 1.0 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2177/info bbsforum.cgi is a popular Perl cgi script from eXtropia.com. It supports the creation and maintenance of web-based threaded discussion forums. Version 1.0 of bbsforum.cgi fails to properly...

XATO Advisory: Win32 Command-Line Mailers

---------------------------------------------------------------------------- Xato Network Security, Inc. www.xato.net Security Advisory XATO-122000-01 December 12, 2000 - MULTIPLE VENDOR COMMAND-LINE MAILER HOLES - SMTP Command-Line Mailers on Win32 Web Servers...

Brown Orifice HTTPD Directory Traversal Vulnerability (was Re: Dangerous Java/Netscape Security Hole)

===================================================== Brown Orifice HTTPD Directory Traversal Vulnerability ===================================================== Background ---------- Brown Orifice HTTPD BOHTTPD http://www.brumleve.com/BrownOrifice/ is "a web server and file sharing tool" that ru...

Fixed in Apache Tomcat 3.2

Low: Information disclosure CVE-2000-0759 Requesting a JSP that does not exist results in an error page that includes the full file system page of the current context. Affects: 3.1 Important: Information disclosure CVE-2000-0672 Access to the admin context is not protected. This context allows an...

CVE-2000-0441

The CVE-2000-0441 entry concerns a vulnerability in AIX 3.2.x and 4.x where local users can gain write access to files on locally or remotely mounted AIX filesystems. The available sources (NVD/CVE lists) describe the affected platforms and the local-write impact but do not provide root-cause tec...

Sean MacGuire Big Brother 1.x - Directory Traversal

source: https://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system. Executing a GET request for:...