CVE-1999-0883

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine...

CVE-1999-1117

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter...

CVE-1999-1287

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface...

CVE-1999-1451

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files...

CVE-1999-1005

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...

CVE-1999-0859

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly...

ie50.xml.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...

CVE-1999-0793

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet...

CVE-1999-1550

bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter...

CVE-1999-0915

URL Live! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0881

Falcon web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0883

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine...

CVE-1999-0877

Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME...

CVE-1999-0296

Solaris volrmmount program allows attackers to read any file...

CVE-1999-0487

The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files...

CVE-1999-0068

CGI PHP mylog script allows an attacker to read any file on the target server...

CVE-1999-0346

CGI PHP mlog script allows an attacker to read any file on the target server...

CVE-1999-0386

Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL...

CVE-1999-1377

Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

netscape.4.x-javascript-unix.txt

Date: Thu, 29 Oct 1998 17:09:23 -0600 From: Ryan Gray To: [email protected] Subject: Re: Javascript bug in Netscape Communicator 4.5 Hello, Just wanted to add that Netscape Communicator 4.5b2 on Slackware Linux 3.5 kernel 2.0.34 is susceptible to this also. I was able to get the script to read...