5883 matches found
CVE-2001-0020
Directory traversal vulnerability in Arrowpoint aka Cisco Content Services, or CSS allows local unprivileged users to read arbitrary files via a .. dot dot attack...
CVE-2001-0215
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte...
FreeBSD 4.3/4.4 - Login Capabilities Privileged File Reading
source: https://www.securityfocus.com/bid/3344/info FreeBSD is a freely available, open source implementation of the BSD UNIX Operating System. It is developed and maintained by the FreeBSD Project. It is possible for a user with access to a system via SSH to gain access to privileged information...
CVE-1999-1287
Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface...
CVE-1999-1377
Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...
CVE-1999-1462
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files...
CVE-1999-1375
FileSystemObject FSO in the showfile.asp Active Server Page ASP allows remote attackers to read arbitrary files by specifying the name in the file parameter...
CVE-1999-1092
CVE-1999-1092 affects tin 1.40: it creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file. The impact is partial confidentiality breach via local access. No remediation details are provided in the supplied documents.
CVE-1999-1218
The CVE-1999-1218 entry describes a vulnerability in the finger utility of Commodore Amiga UNIX 2.1p2a and earlier, where local users can read arbitrary files. The accepted details indicate a partial confidentiality impact with local attack vector and no explicit remediation or exploitation data ...
CVE-1999-1378
The CVE-1999-1378 entry describes a vulnerability in the dbmlparser.exe CGI guestbook program where a chroot operation is not performed properly, allowing remote attackers to read arbitrary files. The affected component is the CGI guestbook program implemented by dbmlparser.exe; root cause is inc...
CVE-1999-1081
The CVE-1999-1081 entry describes a vulnerability in the files.pl script of the Novell WebServer Examples Toolkit 2, which allows remote attackers to read arbitrary files. The connected documents do not provide additional exploitation details, root-cause analysis, affected versions beyond “Toolki...
Чтение файлов через rlmadmin (unauthorized access)
При чтении файла в директории указанной пользователем не проверяется наличие символьных линков...
CVE-2001-1000
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file...
CVE-2001-0674
Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack eg. http://www.server.com/%2e%2e/%2e%2e in an HTTP URL request...
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...
Проблеимы с NetWare Enterprise Web Server (information leak, directory reading)
При установленном GroupWise WebAccess возможно получение листинга каталога и списка системных объектов...
CVE-2001-0555
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...
CVE-2001-0615
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...