1657 matches found
dotproject Remote File Access Vulnerability
dotproject Remote File Access Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.dotproject.net Vendor : informed Mailed advisory: 26/01/02 Vender Response : None ----------------------...
CVE-2002-1390
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL...
CVE-2002-1390
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL...
CVE-2002-1857
jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...
CVE-2002-2229
Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request...
CVE-2002-2269
Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2002-2416
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. dot dot in a URL GET request...
CVE-2002-1340
The "ConnectionFile" property in the DataSourceControl component in Office Web Components OWC 10 allows remote attackers to determine the existence of local files by detecting an exception...
CVE-2002-1344
Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing 1 /absolute/path or 2 .. dot dot sequences...
CVE-2002-1210
Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context...
TFTPD32 Directory Traversal Vulnerability
Advisory available at: http://www.securiteam.com/windowsntfocus/6D00D2061G.html TFTPD32 Directory Traversal Vulnerability -------------------------------------------- SUMMARY http://tftpd32.jounin.net TFTPD32 is a Freeware TFTP server for windows 9x/NT/XP. It provides an implementation of the...
TFTPD32 2.50 - Arbitrary File DownloadUpload
TFTPD32 2.50 - Arbitrary File DownloadUpload source: https://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key...
CVE-2002-1291
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" null character URL...
benchmark tool for HTTP pages.
ezhttpbench.php eZ httpbench version 1.1http://developer.ez.no - benchmark tool for HTTP pages. A security vulnerability in the product allows remote attackers to download any file on the local system that the eZ httpbench has read access to. Vulnerable systems: eZ httpbench version 1.1 eZ...
PHP.networking_utils
Title: The bug in networkingutils.php http://www.sourcecraft.org/downloads networkingutilsPHP Show Files Vulnerability Summary: networkingutils.php Includes a ping function, a traceroute function, and an nslookup function. Vulnerable systems: networkingutils networkingutils.php of the...
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...
KDE 3.0.x - KPF Icon Option File Disclosure
source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possible for a remote attacker to access files...
KDE 3.0.x - KPF Icon Option File Disclosure
KDE 3.0.x - KPF Icon Option File Disclosure source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possibl...