Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : logrotate vulnerabilities (USN-1172-1)

It was discovered that logrotate incorrectly handled the creation of new log files. Local users could possibly read log files if they were opened before permissions were in place. This issue only affected Ubuntu 8.04 LTS. CVE-2011-1098 It was discovered that logrotate incorrectly handled certain...

CVE-2011-2756: Improper Authentication

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors...

jHTTPd 0.1a Directory Traversal Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...

PT-2010-5598

Name of the Vulnerable Software and Affected Versions osTicket version 1.6 Description A directory traversal issue allows remote attackers to read arbitrary files by using a .. dot dot in the file parameter to "module.php". This issue has been disputed by a reliable third party. Recommendations F...

Freefloat FTP Server v1.00 Remote Directory Traversal

Exploit for windows platform in category remote exploits ===================================================== Freefloat FTP Server v1.00 Remote Directory Traversal ===================================================== / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,ftp...

Basic Web Server 1.0 Directory Traversal

------------------------------------------------------------------------ Software................Basic Web Server 1.0 Vulnerability...........Directory Traversal Download................http://www.bit4free.com/ Release Date............9/19/2010 Tested On...............Windows XP...

DEBIAN-CVE-2010-2445

freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the 1 os, 2 io, 3 package, 4 dofile, 5 loadfile, 6 loadlib, 7 module, and 8 require modules or functions...

CVE-2010-2036

Directory traversal vulnerability in the Percha Fields Attach comperchafieldsattach component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

PT-2010-3357 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! component com if surfalert version 1.2 Description: A directory traversal issue in the com if surfalert component allows remote attackers to read arbitrary files, and possibly have other unspecified impacts, by using a .. dot dot in t...

Cross site request forgery (csrf)

DISPUTED The Command Line Interface aka Server CLI or administration interface in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to 1 execute arbitrary code via a...

UBUNTU-CVE-2009-4111

Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions for PEAR allows remote attackers to read and write arbitrary files via a crafted $recipients parameter, and possibly other parameters, a different vulnerability than CVE-2009-402...

PYSEC-2009-10

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

CVE-2009-2691

The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...

Race condition

The mmformaps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read 1 maps and 2 smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition...

CVE-2009-1839: Undefined Security Weakness

Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack...

Java WebStart unprivileged local file and network access

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors...

MDVA-2009:013 : phonon

Phonon in Mandriva Linux 2009.0 was not able to read files with a bracket in their filename. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security...

Mandriva Update for lha MDKSA-2007:117 (lha)

Check for the Version of lha OpenVAS Vulnerability Test Mandriva Update for lha MDKSA-2007:117 lha Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

TeamSpeak 2.0.23.17 - Remote File Disclosure

TeamSpeak 2.0.23.17 - Remote File Disclosure input style="background-color: 313...

JRE allows unauthorized file access and connections to localhost

Unspecified vulnerability in Java Runtime Environment JRE with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make...