My Postcards 6.0 - 'MagicCard.cgi' Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/5029/info My Postcards is a commercial available eletronic postcard system. It is available for Unix and Linux Operating Systems. The magiccard.cgi script does not properly handle some types of input. As a result, it may be possible for a remote user to...

Security Bulletin MS02-016 Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application

-----BEGIN PGP SIGNED MESSAGE----- Title: Q318593: Opening Group Policy Files for Exclusive Read Blocks Policy Application Date: 04 April 2002 Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server Impact: Attacker could block...

CVE-2002-0051

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access...

PT-2002-1143 · Microsoft · Windows 2000

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Recommendations: For Windows 2000, consider restricting access to Group...

Directory traversal in PCI NetSupport Manager

Directory traversal in web manager allows read access to whole disk content...

Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability Type: File Disclosure Release Date: January 10, 2002 Product / Vendor: Eserv Mail, News, Web, FTP and Proxy Servers for Win95/98/NT/2000 http://www.eserv.ru Summary: The...

ACLogic CesarFTP 0.98b - Directory Traversal

source: https://www.securityfocus.com/bid/2786/info CesarFTP is a freely available FTP Server for Microsoft Windows 9x/ME systems. CesarFTP on Windows 98/Me platforms contains a 'directory traversal' vulnerability. If a user requests to change directories to "..." from within a mapped directory,...

jarle aase war ftpd 1.67 b04 - Directory Traversal

jarle aase war ftpd 1.67 b04 - Directory Traversal source: https://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclos...

sendtemp.pl Read Access to Files

Exploit for cgi platform in category web applications ================================ sendtemp.pl Read Access to Files ================================ !/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read...

itafrica webactive 1.0 - Directory Traversal

itafrica webactive 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2386/info It is possible for a remote user to gain read access to directories and files outside the root directory of ITAfrica WEBactive. Requesting a specially crafted URL composed of '../' sequences will...

Дырка в inetd - ident (wheel file fragment reading)

Удаленно можно прочитать первые 16 символов кроме пробелов любого файла к которому имеет доступ группа wheel...

Дырка в Watchguard Firewall

Имея доступ только на чтение можно получить ключевой файл, содержащий ключи полного доступа...

CVE-2000-0913

The CVE-2000-0913 issue affects the Apache web server module mod_rewrite. It enables a remote attacker to read arbitrary files when a RewriteRule directive expands to a filename containing a regular expression, as described for Apache 1.3.12 and earlier. Connected sources corroborate that this is...

LocalWEB2000 1.1 - Directory Traversal

LocalWEB2000 1.1 - Directory Traversal source: https://www.securityfocus.com/bid/2268/info LocalWEB2000 is subject to a directory traversal. Requesting a specially crafted HTTP request with a known filename will enable an attacker to gain read access to the requested file...

Дырка в J-Pilot

Создается директория открытая всем на чтение, которая может содержать важную информацию...

extent technologies rbs isp 2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 8002 will enable a user to read any...

nathan purciful phpphotoalbum 0.9.9 - Directory Traversal

nathan purciful phpphotoalbum 0.9.9 - Directory Traversal source: https://www.securityfocus.com/bid/1650/info The explorer.php script within phpPhotoAlbum 0.9.9 and possibly previous versions are vulnerable to directory traversal. By requesting a URL composed of explorer.php and the ../ string in...

ht://Dig < 3.1.5 htsearch CGI Multiple Vulnerabilities

The 'htsearch' CGI, which is part of the htdig package, allows anyone to read arbitrary files on the target host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10105; scriptversion"1.36"; scriptcveid"CVE-1999-0978...

aspads.txt

We've had a number of questions and possible solutions suggested in the past few hours, let me try and summarize. 1. Several people noted that enabling extensions with "::$DATA" added, i.e. ".asp::$DATA", would cause them to be executed instead of read. This does work, and is faster than removing...

CVE-1999-1020

The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE...