Serv-U FTP Server Jail Break

Serv-U FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to read arbitrary files from locations outside of the application's current directory. This could help the attacker launc...

PT-2011-4823

Name of the Vulnerable Software and Affected Versions Schneider Electric Vijeo Historian versions 4.30 and earlier CitectHistorian versions 4.30 and earlier CitectSCADAReports versions 4.10 and earlier Description A directory traversal issue allows remote attackers to read arbitrary files via...

PT-2011-4813

Name of the Vulnerable Software and Affected Versions HP no Mawashimono Nikki versions 6.6 and earlier Description A directory traversal issue allows remote attackers to read and modify arbitrary files. Recommendations For versions 6.6 and earlier, at the moment, there is no information about a...

PT-2011-4848

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.3.x through 3.3.10.4 phpMyAdmin versions 3.4.x through 3.4.7.0 Description The issue allows remote authenticated users to read arbitrary files via XML data containing external entity references, also known as an XML...

PT-2011-4383

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control NAC Manager version 4.8.x Description A directory traversal issue allows remote attackers to read arbitrary files by sending crafted traffic to TCP port 443. Recommendations For Cisco Network Admission Control N...

CVE-2011-3305: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Network Admission Control NAC Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755...

PT-2011-4468

Name of the Vulnerable Software and Affected Versions Carel PlantVisor versions 2.4.4 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. dot dot in an HTTP GET request. Recommendations For Carel PlantVisor versions 2.4.4...

PT-2011-1770

Name of the Vulnerable Software and Affected Versions OneOrZero AIMS version 2.6.0 Members Edition Description A directory traversal issue exists, allowing remote authenticated users to read arbitrary files. This is achieved through directory traversal sequences in the controller parameter in a...

CVE-2009-5089: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. dot dot in the page parameter...

PT-2011-1336

Name of the Vulnerable Software and Affected Versions Geovision Digital Video Surveillance System version 8.2 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. dot dot in a GET request to the geohttpserver. Recommendations For...

PT-2011-3083

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.41 IBM WebSphere Application Server versions 7.0 before 7.0.0.19 IBM WebSphere Application Server versions 8.0 before 8.0.0.1 Description A directory traversal issue exists in the...

CVE-2011-2746

Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System OTRS 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors...

DEBIAN-CVE-2011-2746

Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System OTRS 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors...

PT-2011-4049

Name of the Vulnerable Software and Affected Versions RSA enVision versions 3.x through 4.x before 4 SP4 P3 Description The issue allows remote attackers to read arbitrary files via unspecified vectors, related to an arbitrary file retrieval vulnerability. Recommendations For versions 3.x through...

CVE-2011-2178

The virSecurityManagerGetPrivateData function in security/securitymanager.c in libvirt 0.8.8 through 0.9.1 uses the wrong argument for a sizeof call, which causes incorrect processing of "security manager private data" that "reopens disk probing" and might allow guest OS users to read arbitrary...

PT-2011-3344

Name of the Vulnerable Software and Affected Versions EMC Captiva eInput version 2.1.1 before 2.1.1.37 Description The issue allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site, due to the lack of restriction on the origin of calls to ActiveX...

PT-2011-4084

Name of the Vulnerable Software and Affected Versions Chyrp versions 2.0 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the file parameter. Recommendations For Chyrp versions 2.0 and earlier, at the moment...

Design/Logic Flaw

servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML-RPC request containing an entity declaration in conjunction with an entity reference,...

Tele Data Contact Management Server <= 1.1 Directory Traversal Vulnerability - Active Check

Tele Data Contact Management Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2011-3897

Name of the Vulnerable Software and Affected Versions Sybase EAServer version 6.3.1 Developer Edition Description A directory traversal issue in the HTTP Server allows remote attackers to read arbitrary files by including a /.../../ sequence in a path. Recommendations For Sybase EAServer version...