Marcelo Costa FileServer Component Directory Traversal Vulnerability

Marcelo Costa FileServer with Windows Live Messenger and Messenger Plus! Live is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2009-2544

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...

Directory traversal

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...

CVE-2009-2544

Marcelo Costa FileServer Component Directory Traversal Vulnerability (CVE-2009-2544) affects Marcelo Costa FileServer 1.0 used with Windows Live Messenger and Messenger Plus! Live. The vulnerability allows remote authenticated users to enumerate arbitrary directories and read arbitrary files thro...

CVE-2009-2544

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...

Windows Live Messenger Plus! FileServer 1.0 Directory Traversal vulnerability

No description provided by source. Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and...

Windows Live Messenger Plus! FileServer 1.0 Directory Traversal Vuln

No description provided by source. Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and...

Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal

Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is...

Windows Live Messenger Plus! FileServer 1.0 Directory Traversal Vuln

Exploit for windows platform in category remote exploits ==================================================================== Windows Live Messenger Plus! FileServer 1.0 Directory Traversal Vuln ==================================================================== Windows Live Messenger Plus!...

Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal

Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and password. I have found a vulnerabili...

Design/Logic Flaw

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...

CVE-2009-1630

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...

CVE-2009-1630

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...

CVE-2009-1630

CVE-2009-1630 affects the Linux kernel nfs client: the nfs_permission function in fs/nfs/dir.c (kernel 2.6.29.3 and earlier) does not check execute (MAY_EXEC) permission bits when atomic_open is available. This allows local users to bypass permissions and execute files, as demonstrated by files o...

Debian Security Advisory DSA 1458-1 (openafs)

The remote host is missing an update to openafs announced via advisory DSA 1458-1. OpenVAS Vulnerability Test $Id: deb14581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1458-1 openafs Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1458-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 10, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1458-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 10, 2008 http://www.debian.org/security/faq -...

DSA-1458-1 openafs

Bulletin has no description...

Race condition

Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list...

CVE-2007-6599

Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list...