1233 matches found
CVE-2004-0778
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...
Debian DSA-392-1 : webfs - buffer overflows, file and directory exposure
Jens Steube reported two vulnerabilities in webfs, a lightweight HTTP server for static content. CAN-2003-0832 - When virtual hosting is enabled, a remote client could specify '..' as the hostname in a request, allowing retrieval of directory listings or files above the document root. CAN-2003-08...
Debian DSA-534-1 : mailreader - directory traversal
A directory traversal vulnerability was discovered in mailreader whereby remote attackers could view arbitrary files with the privileges of the nph-mr.cgi process by default, www-data via relative paths and a null byte in the configLanguage parameter. %NASLMINLEVEL 70300 C Tenable Network Securit...
Sudoedit can expose file contents
Sudoedit can expose file contents Summary: A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that can give an attacker read permission to a file that would otherwise be unreadable. Sudo versions affected: 1.6.8 only Details: While sudoedit runs the actual editor as the...
StrongHold < 3.0 build 3015 System File Disclosure
Binary data 1473.prm...
Vulnerabilities in Merak Webmail Server.
CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...
CVE-2004-0609
Removed by vendor...
PWebServer033.txt
Donato Ferrante Application: PWebServer http://sourceforge.net/projects/pwebserver/ Version: 0.3.3 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Descripti...
Fool's Workshop Owl's Workshop 1.0 - 'readings/index.php' Arbitrary File Access
source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...
borland Web server for corel paradox 1.0 b3 - Directory Traversal
borland Web server for corel paradox 1.0 b3 - Directory Traversal source: https://www.securityfocus.com/bid/9486/info A vulnerability in Borland Web Server for Corel Paradox has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the...
anteco visual technologies ownserver 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/9461/info A vulnerability in OwnServer 1.0 and earlier has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system. http://www.example.com/../../boot.ini...
CVE-2003-0841
The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request...
Gast Arbeiter unauthorized access
It's possible to access file of attackers choice...
Vulnerabilities in Easy File Sharing Web Server (1.2 NEW).
Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...
[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure
-------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...
Low: Red Hat Security Advisory: : GDM allows local user to read any file.
Updated GDM packages are available which correct a bug allowing local users to read any text files on the system, and a denial of service issue if XDMCP is enabled. GDM is the GNOME Display Manager for X. Versions of GDM prior to 2.4.1.6 contain a bug where GDM will run as root when examining the...
.netCART Settings.XML - Information Disclosure
.netCART Settings.XML - Information Disclosure source: https://www.securityfocus.com/bid/8210/info .netCART is a web based e-commerce and shopping cart site designed for ASP.NET. It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is...
.netCART Settings.XML - Information Disclosure
source: https://www.securityfocus.com/bid/8210/info .netCART is a web based e-commerce and shopping cart site designed for ASP.NET. It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is therefore reportedly possible for remote users ...
SCSA019.txt
===================================================================== Security Corporation Security Advisory SCSA-019 Gattaca Server 2003 Vulnerable to Multiple vulnerabilities ===================================================================== PROGRAM: Gattaca Server 2003 HOMEPAGE:...