CVE-2005-3579

CVE-2005-3579 affects ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier. The vulnerability allows remote attackers to access arbitrary local files by manipulating the querystring. Public references (NVD) confirm the affected product/version and the local-file-access impact. No exploit code or...

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...

Music Daemon Denial of Service

The remote host is running MusicDaemon, a music player running as a server. It is possible to cause the Music Daemon to stop responding to requests by causing it to load the /dev/random filename as its track list. An attacker can cause the product to no longer respond to requests. OpenVAS...

TFTP Directory Traversal Vulnerabilities - Active Check

The TFTP Trivial File Transfer Protocol allows remote users to read files without having to log in. This may be a big security flaw, especially if tftpd the TFTP server is not well configured by the admin of the remote host. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might b...

FSP Suite Directory Traversal Vulnerability

The FSP Suite daemon has been found to improperly filter out paths with trailing / or starting with /. This would allow an attacker access to files that reside outside the bounding FSP root directory. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...

IlohaMail Arbitrary File Access via Language Variable

The target is running at least one instance of IlohaMail version 0.7.10 or earlier. Such versions contain a flaw in the processing of the language variable that allows an unauthenticated attacker to retrieve arbitrary files available to the web user. SPDX-FileCopyrightText: 2004-2005 George A...

The ACC router shows configuration without authentication

The remote router is an ACC router. Some software versions on this router will allow an attacker to run the SHOW command without first providing any authentication to see part of the router SPDX-FileCopyrightText: 2000 Sebastian Andersson Some text descriptions might be excerpted from a reference...

Misconfigured Gnutella

The remote host is running the Gnutella servent service. It seems that the root directory of the remote host is visible through this service. Confidential files might be exported. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and ar...

Microsoft Internet Information Services (IIS) Source Fragment Disclosure

Microsoft IIS 4.0 and 5.0 can be made to disclose fragments of source code which should otherwise be inaccessible. This is done by appending +.htr to a request for a known .asp or .asa, .ini, etc file. SPDX-FileCopyrightText: 2001 Pedro Antonio Nieto Feijoo Some text descriptions might be excerpt...

Music Daemon Denial of Service

It is possible to cause the Music Daemon to stop responding to requests by causing it to load the /dev/random filename as its track list. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

thttpd Directory Traversal Vulnerability (CVE-2004-2628) - Windows

The remote web server is vulnerable to a path traversal vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Music Daemon File Disclosure

The remote host is running MusicDaemon, a music player running as a server. It is possible to cause the Music Daemon to disclose the content of arbitrary files by inserting them to the list of tracks to listen to. An attacker can list the content of arbitrary files including the /etc/shadow file,...

Veritas Backup Exec (Windows) - Remote File Access (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

DEBIAN-CVE-2005-2256

Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" encoded dot dot sequences in the formLanguage parameter...

CVE-2005-2147

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the 1 upload or 2 attachment viewer scripts...

CVE-2002-1864

The vulnerability CVE-2002-1864 affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0, where a directory traversal flaw allows remote attackers to read arbitrary files via a .. in an HTTP request. The connected sources consistently describe the issue, but no remediation, patch version, or ...

CVE-2002-1761

CVE-2002-1761 affects PHProjekt versions 2.0 through 3.1 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files via .. sequences. The connected sources confirm the affected software and vulnerability class but do not provide exploitation details or explici...

I-Gallery - Folder Argument Directory Traversal

I-Gallery - Folder Argument Directory Traversal source: https://www.securityfocus.com/bid/14000/info i-Gallery is prone to a directory traversal vulnerability. This could let remote attackers access files on the computer in the context of the Web server process...

CVE-2005-2007

Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the id parameter to the 1 upload or 2 attachment scripts...

DEBIAN-CVE-2005-2007

Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the id parameter to the 1 upload or 2 attachment scripts...