[Full-Disclosure] unzoo 4.4 directory travels

ddaa sseeccuurriittyy ccoonnssuullttaannttee ''''ddoouubblleess'''' aauuddiitttteedd mmaannyy mmoorree aarrcchhiivveess ssiinnssee llaasstt ttiimmee!! uunnzzoooo 44..44 hhaavvee ddiirreeccttoorryy ttrraavveerrssaall bbuugg ttoo!! bbwwaahhaahhaahhaahh!! ggiivvee mmee mmaannyy sseeccuurriittyy jjoo...

PT-2004-1387 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.4 and earlier Description: The issue is related to multiple memory leaks in the isakmpd component, which can be exploited by remote attackers to cause a denial of service due to memory exhaustion. This can be achieved by...

PT-2001-2571 · Imatix · Xitami

Name of the Vulnerable Software and Affected Versions: Xitami versions 2.4 through 2.5 b4 Description: The issue allows remote attackers to gain privileges due to the storage of the Administrator password in plaintext in the default.aut file. The default permissions of this file are world-readabl...

CVE-2000-1016

The default configuration of Apache httpd.conf on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL...