Microsoft IIS 4.05.0 - Malformed Filename Request

Microsoft IIS 4.05.0 - Malformed Filename Request source: https://www.securityfocus.com/bid/1193/info Requesting a known filename with the extension replaced with .htr preceeded by approximately 230 "%20" which is an escaped character that represents a space from Microsoft IIS 4.0/5.0 will cause...

AVM KEN! 1.3.101.4.30 - Remote Denial of Service

AVM KEN! 1.3.101.4.30 - Remote Denial of Service source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular...

AVM KEN! 1.3.10/1.4.30 - Remote Denial of Service

source: https://www.securityfocus.com/bid/1103/info A remote user on the local network is capable of retrieving any known file from a machine running AVM KEN!. This is accomplished by appending ../ to a URL utilizing port 3128 to escape the regular web file structure, and appending the remaining...

Дырка в Tomcat

приложение-пример jsp/source.jsp может быть использовано для получение любого файла с локальной машины используя обратный путь в директориях...

CVE-1999-0158

Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...

CVE-2000-1206

Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using modrewrite, or modvhostalias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files...

WebCom datakommunikation Guestbook 0.1 - wguest.exe Arbitrary File Access

WebCom datakommunikation Guestbook 0.1 - wguest.exe Arbitrary File Access source: https://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writi...

WebCom datakommunikation Guestbook 0.1 - rguest.exe Arbitrary File Access

WebCom datakommunikation Guestbook 0.1 - rguest.exe Arbitrary File Access source: https://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writi...

WebCom datakommunikation Guestbook 0.1 - 'rguest.exe' Arbitrary File Access

source: https://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writing are vulnerable to an attack allowing an intruder to retrieve the conten...

CVE-1999-0158

Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...

Linux imapd Remote Overflow File Retrieve Exploit

Exploit for linux platform in category remote exploits ================================================= Linux imapd Remote Overflow File Retrieve Exploit ================================================= / This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code...

Novell NetWare Web Server 2.x - convert.bas

source: https://www.securityfocus.com/bid/2025/info Novell NetWare Web Server 2.x versions came with a CGI written in BASIC called convert.bas. This script allows retrieval of files outside of the normal web server context. This can be accomplished simply by submitting the filename and path as a...

Novell NetWare Web Server 2.x - convert.bas

Novell NetWare Web Server 2.x - convert.bas source: https://www.securityfocus.com/bid/2025/info Novell NetWare Web Server 2.x versions came with a CGI written in BASIC called convert.bas. This script allows retrieval of files outside of the normal web server context. This can be accomplished simp...