1338 matches found
CVE-2004-2493
Directory traversal vulnerability in Groupmax World Wide Web GmaxWWW 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter...
[SA13665] PHP-Blogger Disclosure of Sensitive Information Security Issue
TITLE: PHP-Blogger Disclosure of Sensitive Information Security Issue SECUNIA ADVISORY ID: SA13665 VERIFY ADVISORY: http://secunia.com/advisories/13665/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: PHP-Blogger 1.x...
[Full-Disclosure] Disclosure of local file content in Mozilla Firefox and Opera
Disclosure of local file content in Mozilla Firefox and Opera Note: I don't know if it could be considered really a security problem, anyway i'll try to explain my ideas. Sorry for my bad english. Author: Giovanni Delvecchio Applications affected: - Firefox 1.0 - Mozilla 1.7 - Opera 7.54 maybe al...
CVE-2004-1083
Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DSStore files and files beginning with ".ht" using alternate capitalization...
EZshopper Directory Transversal in loadpage.cgi
No description provided by source. Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html milw0rm.com 2004-11-25...
CVE-2004-0778
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...
Debian DSA-534-1 : mailreader - directory traversal
A directory traversal vulnerability was discovered in mailreader whereby remote attackers could view arbitrary files with the privileges of the nph-mr.cgi process by default, www-data via relative paths and a null byte in the configLanguage parameter. %NASLMINLEVEL 70300 C Tenable Network Securit...
Debian DSA-392-1 : webfs - buffer overflows, file and directory exposure
Jens Steube reported two vulnerabilities in webfs, a lightweight HTTP server for static content. CAN-2003-0832 - When virtual hosting is enabled, a remote client could specify '..' as the hostname in a request, allowing retrieval of directory listings or files above the document root. CAN-2003-08...
Sudoedit can expose file contents
Sudoedit can expose file contents Summary: A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that can give an attacker read permission to a file that would otherwise be unreadable. Sudo versions affected: 1.6.8 only Details: While sudoedit runs the actual editor as the...
StrongHold < 3.0 build 3015 System File Disclosure
Binary data 1473.prm...
Vulnerabilities in Merak Webmail Server.
CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...
CVE-2004-0609
Removed by vendor...
PWebServer033.txt
Donato Ferrante Application: PWebServer http://sourceforge.net/projects/pwebserver/ Version: 0.3.3 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Descripti...
Fool's Workshop Owl's Workshop 1.0 - 'readings/index.php' Arbitrary File Access
source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...
borland Web server for corel paradox 1.0 b3 - Directory Traversal
borland Web server for corel paradox 1.0 b3 - Directory Traversal source: https://www.securityfocus.com/bid/9486/info A vulnerability in Borland Web Server for Corel Paradox has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the...
anteco visual technologies ownserver 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/9461/info A vulnerability in OwnServer 1.0 and earlier has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system. http://www.example.com/../../boot.ini...
CVE-2003-0841
The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request...
Gast Arbeiter unauthorized access
It's possible to access file of attackers choice...
Vulnerabilities in Easy File Sharing Web Server (1.2 NEW).
Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...
[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...