850 matches found
DEBIAN-CVE-2005-0072
zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files...
CVE-2004-1231
CVE-2004-1231 is a directory traversal vulnerability in Gadu-Gadu, allowing remote attackers to read arbitrary files via ".." sequences in a DCC/CTCP packet (type=1, subtype=4). The NVD entry confirms the vulnerability but provides no patch details in the connected documents. Impact is read acces...
CVE-2004-0302
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the 1 file parameter in index.php, 2 editfile in glossary.php, or 3 editfile in newmultiplechoice.php...
CVE-2004-1646
Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...
WebAPP Directory Traversal
There is a flaw in the remote version of WebApp fails to filter directory traversal sequences from the 'viewcat' parameter of the 'index.cgi' script. An unauthenticated attacker can leverage this issue to read arbitrary files on the remote host with the privileges of the web server process...
CVE-2003-0312
Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...
CVE-2000-0590
Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the datadir parameter...
CVE-2002-2387
Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the LS command...
DEBIAN-CVE-2002-1782
The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...
CVE-2002-0554
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request...
CVE-2002-0410
sendmessage.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded...
AZL-36937 CVE-2002-0129 affecting package efax 0.9a-34
efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message...
CVE-2002-0138
CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command...
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...
Working Resources BadBlue 1.51.6 - Directory Traversal
Working Resources BadBlue 1.51.6 - Directory Traversal source: https://www.securityfocus.com/bid/4179/info Working Resources BadBlue is a webserver intended to share various resources and is developed for Microsoft Windows environments. BadBlue is prone to directory traversal attacks. It is...
CVE-2001-0971
Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. dot dot or drive letter e.g., C: in an HTTP request...
CVE-2001-1209
Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-1999-1517
CVE-1999-1517 concerns runtar in the Amanda backup system on UNIX-like OSes. The vulnerable component runs tar with root privileges, enabling a local attacker to overwrite or read arbitrary files by specifying target files to runtar. The CVSS-based notes indicate local access, no authentication, ...