CVE-1999-0347

Affected software: Internet Explorer 4.01. Type of issue: remote read of local files and ability to spoof web pages via a "%01" character in an about: JavaScript URL, which makes IE use the domain specified after the character. Underlying cause: parsing/URL handling in about: URLs allows domain o...

CVE-1999-0736

The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...

CVE-1999-0737

The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...

CVE-1999-0776

Alibaba HTTP server allows remote attackers to read files via a .. dot dot attack...

CVE-1999-0467

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter...

microsoft.vm.java.txt

Jan 28, 2000 Translator's note: We announce another security hole of Microsoft Virtual Machine$B!!B Microsoft VM for Java, including the latest version. This is the translation version of the warning note written in Japanese by Dr. Hiromitsu Takagi posted at the Java House Mailing List, a Japanes...

CVE-2000-0126

Sample Internet Data Query IDQ scripts in IIS 3 and 4 allow remote attackers to read files via a .. dot dot attack...

Oracle 8.1.7 - JSPJSPSQL Remote File Reading

Oracle 8.1.7 - JSPJSPSQL Remote File Reading...

CVE-1999-0881

Falcon web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0887

FTGate web interface server allows remote attackers to read files via a .. dot dot attack...

CVE-1999-0933

TeamTrack web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0793

Technical details about CVE-1999-0793 are not publicly provided in the supplied documents; affected software/version, root cause, and remediation are not specified. Monitor Red Hat/NVD entries for updates.

CVE-1999-0793

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet...

CVE-1999-0695

The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. dot dot attack...

CVE-1999-0777

The connected Red Hat/NVD/CVE records confirm CVE-1999-0777 affects IIS FTP servers, where a remote attacker can read or delete files on the server despite having no access permissions. The vulnerability stems from a permission bypass in the FTP service, enabling partial confidentiality and integ...

CVE-1999-0917

The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files...

CVE-1999-0883

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine...

CVE-1999-0934

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters...

CVE-1999-0695

Technical details are not publicly available in the provided documents for CVE-1999-0695; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-1999-0771

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. dot dot attack...