thttpd ssi file retrieval

The remote HTTP server allows an attacker to read arbitrary files on the remote web server, by employing a weakness in an included ssi package, by prepending pathnames with %2e%2e/ hex-encoded ../ to the pathname. Example: GET /cgi-bin/ssi//%2e%2e/%2e%2e/etc/passwd will return /etc/passwd...

eXtropia Web Store Remote File Retrieval Vulnerability - Active Check

eXtropia SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10532";...

IMAP arbitrary file retrieval

The target is running an IMAP daemon that allows an authenticated user to retrieve and manipulate files that would be available to that user via a shell. If IMAP users are denied shell access, you may consider this a vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text...

IMAP arbitrary file retrieval

The target is running an IMAP daemon that allows an authenticated user to retrieve and manipulate files that would be available to that user via a shell. If IMAP users are denied shell access, you may consider this a vulnerability. OpenVAS Vulnerability Test $Id: imaparbitraryfileretrieval.nasl...

Boa Web Server File Disclosure Vulnerability (Oct 2000) - Active Check

The Boa Web Server is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Anaconda Double NULL Encoded Remote File Retrieval

The remote Anaconda Foundation Directory contains a flaw that allows anyone to read arbitrary files with root super-user privileges. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Poll It v2.0 cgi

'PollItSSIv2.0.cgi SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10459";...

Avotus CDR mm File Retrieval Attempt

The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd across the network. SPDX-FileCopyrightText: 2004 Anonymous Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Important: Red Hat Security Advisory: wget security update

Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A stack based buffer overflow bug was found ...

Rockliffe.txt

======================================================================== = Multiple vulnerabilities within RockLiffe MailSite Express WebMail = = Also available online at = http://www.security-assessment.com/Advisories/RockliffeExpressWebmailVuln erabilities.pdf = = Vendor Website: =...

[Full-disclosure] Multiple vulnerabilities within RockLiffe MailSite Express WebMail

======================================================================== = Multiple vulnerabilities within RockLiffe MailSite Express WebMail = = Also available online at = http://www.security-assessment.com/Advisories/RockliffeExpressWebmailVuln erabilities.pdf = = Vendor Website: =...

PHP 5.0.5 - Safedir Restriction Bypass

source: https://www.securityfocus.com/bid/15119/info PHP is prone to multiple vulnerabilities that permit an attacker to bypass the 'safedir' directory restriction. An attacker can exploit these vulnerabilities to possible execute arbitrary code currently existing on a vulnerable system, or to...

RHEL 4 : wget (RHSA-2005:771)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...

wget security update

CentOS Errata and Security Advisory CESA-2005:771-01 Updated wget package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

wget security update

CentOS Errata and Security Advisory CESA-2005:771 Updated wget package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

Low: Red Hat Security Advisory: wget security update

Updated wget package that fixes several security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes file...

[Full-disclosure] Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability

-------------------------------------------------------------- HYA-2005-006 h4cky0u.org Advisory 007 -------------------------------------------------------------- Date - Tue Sep 13 2005 TITLE: ====== Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability SEVERITY: ========= High...

Simple PHP Blog <= 0.4.0 Multiple Vulnerabilities

The version of Simple PHP Blog installed on the remote host allows authenticated attackers to upload files containing arbitrary code to be executed with the privileges of the web server userid. In addition, it likely lets anyone retrieve its configuration file as well as the user list and to dele...

Home FTP Server directory traversal

It's possible to obtain any file from remote system...

W-Agora 4.2 - 'Site' Directory Traversal

source: https://www.securityfocus.com/bid/14597/info W-Agora is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by supplying directory traversal strings '../...