[SecurityOffice] Liteserve Web Server v2.0 Authorization Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Liteserve Web Server v2.0 Authorization Bypass Vulnerability -- - -- Type File Disclosure - -- Release Date October 24, 2002 - -- Product / Vendor LiteServe is a powerful, full-featured Web, EMail and FTP server. This server software is perfect fo...

Savant Web Server 3.1 - File Disclosure

source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this issue. http://host/passwordfolder. "GET...

Blazix 1.2 - Password Protected Directory Information Disclosure

Blazix 1.2 - Password Protected Directory Information Disclosure source: https://www.securityfocus.com/bid/5567/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. Blazix does not properly handle some specia...

CVE-2002-0347

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request...

CVE-2002-0347

The CVE-2002-0347 entry concerns a directory traversal vulnerability in the Cobalt RAQ 4 web server. An attacker can leverage a .. (dot dot) in an HTTP request to read files, including password-protected files, and potentially access files outside the web root. The issue is described in the NVD e...

CVE-2002-0347: Undefined Security Weakness

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request...

CVE-2002-0304: Undefined Security Weakness

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request...

CVE-2002-0112

Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL...

CVE-2002-0112

Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL...

CVE-2002-0100: Undefined Security Weakness

AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file...

Несанкционированный доступ в Lotus Domino (protection bypass)

Можно получить доступ к URL закрытой паролем, используя запрос определенной длины...

Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability Type: File Disclosure Release Date: January 10, 2002 Product / Vendor: Eserv Mail, News, Web, FTP and Proxy Servers for Win95/98/NT/2000 http://www.eserv.ru Summary: The...

EServ 2.9x - Password-Protected File Access

EServ 2.9x - Password-Protected File Access source: https://www.securityfocus.com/bid/3838/info EServ is a combination Mail, News, Web, FTP and Proxy Server for Microsoft Windows 9x/NT/2000 systems. It is possible to construct a web request which is capable of accessing the contents of password...

AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability Type: File Disclosure Release Date: January 6, 2002 Product / Vendor: AOLserver is America Online's Open-Source web server. AOLserver is the backbone of the largest and busiest production...

Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98

Здравствуйте , Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98 Network World http://www.nwfusion.com Если Вы работаете на сервере Windows 2000 с установленным терминальным сервисом Terminal Services, то должны знать о его потенциальной...

excel.macro.virus.patch.flaw.txt

Date: Thu, 13 May 1999 16:12:48 -0400 From: rotaiv To: [email protected] Subject: Re: Microsoft Security Bulletin MS99-014 -----BEGIN PGP SIGNED MESSAGE----- This is in response to the Microsoft Security Bulletin MS99-014. On 3/29/99 I posted a message to BugTraq titled, "Bypassing Excel Macro...