GLSA-200602-07 : Sun JDK/JRE: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200602-07 Sun JDK/JRE: Applet privilege escalation Applets executed using JRE or JDK can use 'reflection' APIs functions to elevate its privileges beyond the sandbox restrictions. Adam Gowdiak discovered five vulnerabilities that...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

CVE-2005-4201

CVE-2005-4201 describes a directory traversal vulnerability in My Album Online 1.0, exploitable remotely via triple dot sequences (".../") in unspecified vectors. According to the NVD entry, it is a network-accepting issue with low attack complexity, no authentication, and partial confidentiality...

CVE-2005-4201

Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" triple dot sequences in unspecified vectors...

CVE-2005-4202

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via 1 .. dot dot, 2 "..." triple dot, and 3 "..//" sequences in the URL, 4 "../" sequences in the source parameter to viewsource.jsp, or 5 ".." dot dot backslash sequences in the...

XML Core Services patch (Q318203)

XMLHTTP Control Can Allow Access to Local Files. A flaw exists in how the XMLHTTP control applies IE security zone settings to a redirected data stream returned in response to a request for data from a web site. A vulnerability results because an attacker could seek to exploit this flaw and speci...

QNX inputtrap unauthorized files access

-e flag allows to specify input file, file ownership and privileges are not checked...

CVE-2005-2256

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" encoded dot dot sequences in the formLanguage parameter...

apexec.txt

Example: www.victim.com/cgi-bin/apexec.pl?template=.%00./.%00./.%00./.%00./.%00./.%00./etc/passwd%%0000.html Greetz MSDarkflyer --...

Ipswitch IMail Web Calendaring Server GET Request Traversal Arbitrary File Access

The remote server is running Ipswitch IMail Web calendaring. The remote version of this software is vulnerable to a directory traversal attack. An attacker, exploiting this vulnerability, may be able to retrieve sensitive files present on the server. %NASLMINLEVEL 70300 C Tenable Network Security...

xinkaa Web station 1.0.3 - Directory Traversal

xinkaa Web station 1.0.3 - Directory Traversal source: https://www.securityfocus.com/bid/12606/info A vulnerability has been identified in the handling of certain types of requests by Xinkaa WEB Station. Because of this, it is possible for an attacker to gain access to potentially sensitive syste...

sd server 4.0.70 - Directory Traversal

sd server 4.0.70 - Directory Traversal source: https://www.securityfocus.com/bid/12609/info A vulnerability has been identified in the handling of certain types of requests by SD Server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read...

escripts software e_board 4.0 - Directory Traversal

source: https://www.securityfocus.com/bid/12048/info It is reported that eBoard is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../' directory traversal sequences and a NULL %00 in the...

Opera 7 multiple bugs

Crossite scripting including local zone, local files access, mail access, user activity tracking, etc. Buffer overflow. Directory traversal. Files overwriting. Local files access with Location overwriting. Multiple Java bugs...

Mozilla and Opera information leak

By using localfiles object it's possible to obtain local files list. Under some conditions it' possible ot retrieve file content...

PT-2004-2059 · Apache +1 · Apache +1

Name of the Vulnerable Software and Affected Versions: Apache for Apple Mac OS X versions 10.2.8 and 10.3.6 Description: The issue arises from the difference in how Apache and the Apple HFS+ filesystem handle file access in terms of case sensitivity. Apache restricts access to files in a...

cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure

source: https://www.securityfocus.com/bid/11456/info It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions. This vulnerability reportedly allows attackers to gain access to the contents of arbitrary, potentially...

myserver 0.7 - Directory Traversal

source: https://www.securityfocus.com/bid/11189/info MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to potentially sensitive files located...

CVS information leak

By using undocumented -X key for 'cvs history' command it's possible to check existance of system files...

open3sIDSonshowaudit.txt

----------========== OPEN3S-2003-08-08-eng-informix-onshowaudit ==========---------- Title: Local Vulnerability in IBM Informix IDS v9.40 onshowaudit binary Date: 08-08-2003 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over ./bin/onshowaudit can read...