ZeroBoard 4.1 - PHP Include File Arbitrary Command Execution

source: https://www.securityfocus.com/bid/5028/info Zeroboard is a PHP web board package available for the Linux and Unix platforms. Under some circumstances, it may be possible to include arbitrary PHP files. The head.php file does not sufficiently check or sanitize input. When the "allowurlfope...

Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/4998/info IRCIT is a terminal based IRC client for Linux and Unix systems. IRCIT contains a remote buffer overflow vulnerability. When a INVITE message is received, the supplied from user data is copied into a fixed buffer of length MAXHOSTLEN. A...

Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2)

Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-06 Description: Tomcat realPath.jsp gives location of web root. Date: 8/1/2002 Application: Apache Tomcat Java server versions 3.23 and 3.24 Platform: Linux/Unix Severity: Remote attackers can obtain the location of webroot...

Vulnerability in Apache Tomcat v3.23 & v3.24

Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-05 Description: Tomcat source.jsp directory listing and webroot location display Date: 8/1/2002 Application: Apache Tomcat Java server versions 3.23 and 3.24 Platform: Linux/Unix Severity: Remote attackers can obtain listings of...

Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3)

Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-7 Description: Tomcat multiple sample files display webroot location on default configuration on request. Date: 8/1/2002 Application: Apache Tomcat java server v3.23, 3.24. Platform: Linux/Unix Severity: Remote attackers can obta...

LogWatch 2.1.12.5 - Insecure Temporary Directory Creation

LogWatch 2.1.12.5 - Insecure Temporary Directory Creation source: https://www.securityfocus.com/bid/4374/info LogWatch is a freely available, open source script for monitoring log files. It may be used with the Linux and Unix Operating systems. Upon execution, LogWatch creates a directory in /tmp...

SLA-17.Anaconda.txt

Synnergy Laboratories Advisory SLA-2000-17 NAME Anaconda Foundation Directory NULL byte vulnerability AFFECTED Linux/UNIX with Anaconda Foundation Directory SYNOPSIS Synnergy Labs has found a flaw within Anaconda Foundation Directory that allow s a user to successfully traverse the filesystem on ...

SLA-15-PHPix.txt

Synnergy Laboratories Advisory SLA-2000-15 NAME PHPix 1.0.X directory traversal vulnerability AFFECTED Linux/UNIX with PHPix 1.0.0/1.0.1/1.0.2 SYNOPSIS Synnergy Labs has found a flaw within PHPix that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...

PHPix advisory

Synnergy Laboratories Advisory SLA-2000-15 NAME PHPix 1.0.X directory traversal vulnerability AFFECTED Linux/UNIX with PHPix 1.0.0/1.0.1/1.0.2 SYNOPSIS Synnergy Labs has found a flaw within PHPix that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...

Master Index traverse advisory

Synnergy Laboratories Advisory SLA-2000-16 NAME Master Index directory traversal vulnerability AFFECTED Linux/UNIX with Master Index SYNOPSIS Synnergy Labs has found a flaw within Master Index that allows a user to successfully traverse the filesystem on a remote host, allowing arbitary...

phpPhotoAlbum.txt

PhotoAlbum 0.9.9 explorer.php Vulnerability + Advisory by pestilence www.synnergy.net |===============================================| Affected program: PhotoAlbum v0.9.9 previous ? System : Linux, UNIX, Windows Problem : Problem located within the explorer.php script. Discovery :...