CVE-2003-0267

ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file...

DEBIAN-CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

CVE-2002-0160

CVE-2002-0160 affects Cisco Secure Access Control Server (ACS) for Windows, versions 2.6.x and earlier and 3.x through 3.01 (build 40). The vulnerability allows remote attackers to read files (HTML, Java class, images) outside the web root by crafting a modified .... path in the URL aimed at port...

CVE-1999-1488

The CVE-1999-1488 entry concerns the sdrd daemon in IBM SP2 System Data Repository (SDR), where the service allows remote reading of files without authentication. The description indicates unauthenticated access enabling potentially disclosure of data via a network vector; no concrete exploit ste...

CVE-2001-0900

Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the include parameter...

PT-2001-2176 · Freebsd +1 · Openssh +2

Name of the Vulnerable Software and Affected Versions: OpenSSH on FreeBSD versions 4.4 and earlier Description: The issue allows local users to bypass capabilities checks and read arbitrary files by specifying alternate copyright or welcome files, due to libutil in OpenSSH not dropping privileges...

CVE-1999-1451

The CVE-1999-1451 entry concerns the Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0. The vulnerable component is Winmsdp.exe, enabling remote attackers to read arbitrary files. The provided documents do not specify the attack vector details beyond remote reading of files, nor do they name...

CVE-2001-1138

Directory traversal vulnerability in r.pl aka r.cgi of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the FILE parameter...

CVE-2001-0461

template.cgi in Free On-Line Dictionary of Computing FOLDOC allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi...

CVE-2001-0235

Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running...

CVE-2000-0912

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter...

CVE-2000-0911

CVE-2000-0911 affects IMP 2.2 and earlier. The vulnerability arises from modifying the hidden attachment_name form variable, enabling an attacker to read and delete arbitrary files by causing IMP to send the targeted file to the attacker as an attachment. The available sources confirm the affecte...

CVE-2000-0853

YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0859

The CVE-1999-0859 entry concerns the Solaris arp utility. The description states that local users can read files using the -f parameter, which lists lines in the file that do not parse properly, indicating a local-height confidentiality impact. The available sources (NVD CVE record, CVE List entr...

CVE-1999-0859

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly...

CVE-1999-0860

Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...

CVE-1999-0887

The vulnerability CVE-1999-0887 affects the FTGate web interface server, where a remote attacker can read files via a directory traversal using "..". This is confirmed across multiple connected sources (Red Hat, CVE lists, NVD/NVD-derived entries). The underlying cause is a potential improper pat...

PT-1999-1837 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.0 through 5.01 Description: The issue allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. Recommendations: For Internet Explorer versions 5.0...

CVE-1999-0907

sccw allows local users to read arbitrary files...

PT-1999-1342 · Compaq · Compaq Management Agents +1

Name of the Vulnerable Software and Affected Versions: Compaq Management Agents affected versions not specified Compaq Survey Utility affected versions not specified Description: The issue allows a remote attacker to read arbitrary files via a .. dot dot attack, which is related to the web...