CVE-2004-1795

Technical details about CVE-2004-1795 are not publicly available in the provided connected documents. Monitor for updates.

PHP4 cURL functions bypass open_basedir

==================================================== Subject: PHP4 cURL functions bypass openbasedir Author: frame at kernelpanik.org Product: PHP4 compile with cURL not tested in PHP5 Vendor: PHP/Zend Vendor URL: www.php.net Tipe: Local Risk: Low/Medium...

GLSA-200408-09 : Roundup: Filesystem access vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-09 Roundup: Filesystem access vulnerability Improper handling of a specially crafted URL allows access to the server's filesystem, which could contain sensitive information. Impact : An attacker could view files owned by th...

Platinum FTP server Multiple Vulnerabilities

Binary data 1825.prm...

Roundup: Filesystem access vulnerability

Background Roundup is a simple to use issue-tracking system with command-line, web, and e-mail interfaces. Description Improper handling of a specially crafted URL allows access to the server's filesystem, which could contain sensitive information. Impact An attacker could view files owned by the...

IRM Security Advisory 9

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- IRM Security Advisory No. 009 RiSearch and RiSearch ProPro are vulnerable to open FTP/HTTP proxy, directory listings and file disclosure vulnerabilities Vulnerablity Type / Importance: Network Subversion, Open Proxy, Brute-For...

roundUP.txt

Vickenty Fesunov 2004-05-27 04:51 random filesystem access Roundup uses /home/@@file/ prefix to get static files from the filesystem. It does not restrict in any way the files that are handled. I have a roundup tracker home at /home/kent/cit, then I do the following: kent@kent:$ nc localhost 8080...

CVE-2004-2073

Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command...

Linux VServer Project 1.2x - Chroot Breakout

/ source: https://www.securityfocus.com/bid/9596/info VServer is reported prone to a breakout vulnerability that allows a malicious user to escape from the context of the chrooted root directory of the virtual server. This issue is due to the VServer application failing to secure itself against a...

Opera Web Browser 7 - IFRAME Zone Restriction Bypass

source: https://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed HTML iframes which point to local system locations...

ScozBook 1.1 - Full Path Disclosure

ScozBook 1.1 - Full Path Disclosure source: https://www.securityfocus.com/bid/7236/info A path disclosure vulnerability has been reported for ScozBook. The issue occurs when a request is made to the view.php script page. Access to sensitive filesystem information may aid an attacker in launching...

CVE-2002-1269

Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem...

CVE-2002-1618

JFS JFS3.1 and OnlineJFS in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems...

Cherokee Web Server does not adequately validate user input thereby allowing directory traversal

Overview Cherokee contains a directory traversal vulnerability caused by failure to filter '../' character sequences. Description Cherokee is a compact, open-source web server. Cherokee does not filter '../' sequences from HTTP requests. As a result, it is possible for a remote attacker to reques...

Security Issue with Mac OS X

Below is the copy of the email I sent to Apple a week ago I have dropped them a copy of the mail on their feedback web page, too. Since I haven't heard of them since, I have chosen to make the security issue available to the community. Below the copy of the mail is a short discussion of the...

Multiple Security Vulnerabilities in Sharp Zaurus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Syracuse University Research for Understanding Aspects of the Zaurus Security Advisory SURUAZ-2002-07-07 Center for Systems Assurance http://www.csa.syr.edu Synopsis: The SharpR Zaurustm SL-5000D and SL-5500 have multiple security vulnerabilities in...

Sharp Zaurus multiple bugs

Remote filesystem access, weak pseudo-random numbers generation...

Обхот chroot() в AtheOS (protection bypass)

С помощью обратного пути можно обратиться к файлам за пределами chroot...

PHP Safe Mode Filesystem Circumvention Problem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ------------------------------------------------------------------------------ Security Advisory DW020203-PHP Release: 3rd February 2002 PHP Safe Mode Filesystem Circumvention Problem Severity: Medium to high. Affects: PHP, all versions which include...

PHP 4.x5.x MySQL Library - Safe_mode Filesystem Circumvention (1)

PHP 4.x5.x MySQL Library - Safemode Filesystem Circumvention 1 ?php / source: https://www.securityfocus.com/bid/4026/info PHP's 'safemode' feature may be used to restrict access to certain areas of a filesystem by PHP scripts. However, a problem has been discovered that may allow an attacker to...