CVE-2002-0500

Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (1)

source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file does not exist, the onError event...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (2)

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration 2 source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the docume...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (1)

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration 1 source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the docume...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (2)

source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file does not exist, the onError event...

Security Bulletin MS00-098

====================================================================== Issue: ActiveX control in Indexing Services could allow web application to read file properties Date: 19 December 2000 Affected Software: Index Server 2.0 ships in Windows NT 4.0 Option Pack; Indexing Services 3.0 ships in...

GuildFTPd Traversal Arbitrary File Enumeration

The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. This is caused by the server responding with different error messages depending on if the file exists or not. An attacker may use this flaw to gain more...

msie.activex.filesearch.txt

Date: Wed, 9 Jun 1999 12:22:00 +0100 From: "Steve Loughran" Subject: ActiveX Security Revisited The latest Microsoft security bulletin http://www.microsoft.com/security/bulletins/ms99-018.asp includes two Internet Explorer patches. The first is a classic stack overrun -a web page can supply an ic...