Quik-Serv Web Server v1.1B Arbitrary File Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Quik-Serv Web Server v1.1B Arbitrary File Disclosure Abstract: Quik-Serv Web Server is a small webserver with CGI implemented into it. The server is vulnerable to a directory transversal which allows a remote user to display arbitrary files. Exploit: ...

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure (MS02-023)

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure MS02-023 source: https://www.securityfocus.com/bid/4411/info The Cascading Style-Sheets CSS interpreter for Microsoft Internet Explorer is prone to an issue which may allow an attacker to read the contents of files on a web...

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure (MS02-023)

source: https://www.securityfocus.com/bid/4411/info The Cascading Style-Sheets CSS interpreter for Microsoft Internet Explorer is prone to an issue which may allow an attacker to read the contents of files on a web user's system. It is possible to use the cssText property of the styleSheet to rea...

Pi3Web/2.0.0 File-Disclosure/Path Disclosure vuln

Pi3Web/2.0.0 File-Disclosure/Path Disclosure Vulnerability Discovered by: Teknophreak of Malloc Date: March 9 2002 Contact: [email protected] Pi3Web is a Webserver available for multiple Microsoft Windows platforms. There are multiple disclosure flaws within the webserver that may assist an...

Xerver-2.10-File-Disclousure&DoS-attack

------oOo------ Xerver Free Web Server 2.10 file Disclosure & DoS Denial of Service Attack. ------oOo------ Company Affected: www.JavaScript.nu Version: v2.10 Date Added: 02-27-02 Size: 287 KB OS Affected: : Windows ALL, Linux ALL, BSD all, Solaris ALL, MAC ALL. Author: Alex Hernandez...

Xerver-2.10.txt

------oOo------ Xerver Free Web Server 2.10 file Disclosure & DoS Denial of Service Attack. ------oOo------ Company Affected: www.JavaScript.nu Version: v2.10 Date Added: 02-27-02 Size: 287 KB OS Affected: : Windows ALL, Linux ALL, BSD all, Solaris ALL, MAC ALL. Author: Alex Hernandez Thanks all...

Endymion SakeMail and MailMan File Disclosure Vulnerability

Product: SakeMail - Webmailsystem http://www.endymion.com Problem Description: due to missing input-validation it is possible to read xml/other files with sakemails permissions read THIS javanullbyte.html for additional infos on nullbytes and java-classes! Example: a HTTP-request to:...

Endymion SakeMail and MailMan File Disclosure Vulnerability

Product: Mailman - Webmailsystem http://www.endymion.com Problem Description: due to missing input-validation it is possible to read files with the webservers or mailmans permissions a similar pretty much the same bug was discovered 2 years ago from "secureality"...

SecurityOffice Security Advisory:// LilHTTP Web Server Protected File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 LilHTTP Web Server Protected File Access Vulnerability Type: File Disclosure Release Date: February 21, 2002 Product / Vendor: LilHTTP Web Server is very small yet powerfull Web Server. This server weighs in at just under 120k in size as a stand-alone...

GNUJSP 1.0 - File Disclosure

GNUJSP 1.0 - File Disclosure source: https://www.securityfocus.com/bid/4125/info GNUJSP is a freely available, open-source implementation of Sun's Java Server Pages. It will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000 operating systems. It has been reported that a...

GNUJSP 1.0 - File Disclosure

source: https://www.securityfocus.com/bid/4125/info GNUJSP is a freely available, open-source implementation of Sun's Java Server Pages. It will run on most Unix and Linux variants, as well as Microsoft Windows NT/2000 operating systems. It has been reported that a remote attacker may disclose th...

Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability Type: File Disclosure Release Date: January 10, 2002 Product / Vendor: Eserv Mail, News, Web, FTP and Proxy Servers for Win95/98/NT/2000 http://www.eserv.ru Summary: The...

AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability Type: File Disclosure Release Date: January 6, 2002 Product / Vendor: AOLserver is America Online's Open-Source web server. AOLserver is the backbone of the largest and busiest production...

Apache 1.3.20 (Win32) - PHP.exe Remote File Disclosure

Apache 1.3.20 Win32 - PHP.exe Remote File Disclosure source: https://www.securityfocus.com/bid/3786/info A vulnerability exists in the suggested default configuration for the Apache PHP.EXE binary on Microsoft Windows platforms. This issue has the potential to disclose the contents of arbitrary...

Apache 1.3.20 (Win32) - 'PHP.exe' Remote File Disclosure

source: https://www.securityfocus.com/bid/3786/info A vulnerability exists in the suggested default configuration for the Apache PHP.EXE binary on Microsoft Windows platforms. This issue has the potential to disclose the contents of arbitrary files to remote attackers. As a result, it is possible...

Microsoft Internet Explorer 56 - GetObject File Disclosure

Microsoft Internet Explorer 56 - GetObject File Disclosure source: https://www.securityfocus.com/bid/3767/info A flaw exists in Microsoft Internet Explorer that may allow a remote attacker to view known files on a target system when a user views web content containing a specially crafted script...

Microsoft Internet Explorer 5/6 - GetObject File Disclosure

source: https://www.securityfocus.com/bid/3767/info A flaw exists in Microsoft Internet Explorer that may allow a remote attacker to view known files on a target system when a user views web content containing a specially crafted script. The problem occurs when the 'GetObject' JScript function is...

Abe Timmerman - 'zml.cgi' File Disclosure

source: https://www.securityfocus.com/bid/3759/info zml.cgi is a perl script which can be used to support server side include directives under Apache. It recognizes a simple set of commands, and allows access to cgi parameters and environment variables. It can run on Linux and Unix systems or any...

webmin 0.91 - Directory Traversal

webmin 0.91 - Directory Traversal source: https://www.securityfocus.com/bid/3698/info Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms, you can setup user accounts, Apache, DNS, file sharing and so on. Webmin will run on most Uni...

Digital Unix msgchk vulnerable to file contents disclosure via symlink redirection of profile

Overview msgchk, a part of the MH mail system, reads the user's .mhprofile in order to obtain configuration options. If the .mhprofile is linked to another file with illegal format, the first line of that file will be displayed in an error message by msgchk. Description msgchk is the portion of t...