1623 matches found
CVE-2000-0526
mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-1999-0842
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...
Vulnerability in infosrch.cgi
SGI Security Advisory Title: Vulnerability in infosrch.cgi Number: 20000501-01-P Date: May 22, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon as soon as possible...
CVE-2000-0443
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. dot dot attack...
HP JetAdmin 5.5.177jetadmin 5.6 - Directory Traversal
HP JetAdmin 5.5.177jetadmin 5.6 - Directory Traversal source: https://www.securityfocus.com/bid/1243/info By default JetAdmin Web Interface Server listens on port 8000. By requesting a specially formed URL which includes "../" it is possible for a remote user to gain read-access to any files...
CVE-2000-0436
MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...
FreeBSD-SA-00:18.gnapster.knapster
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:18 Security Advisory FreeBSD, Inc. Topic: gnapster/knapster ports allows remote users to view local files Category: ports Module: gnapster/knapster Announced: 2000-05-09...
CVE-1999-1005
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...
CVE-2000-0242
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...
CVE-2000-0208
The htdig ht://Dig CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks in parameters to htsearch...
CVE-2000-0634
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0039
CVE-2000-0039 affects AltaVista search engine via a directory traversal vulnerability in the query.cgi CGI program, allowing remote attackers to read files above the document root by exploiting a .. (dot dot) parameter. The issue is documented across multiple sources (NVD, CVE List, Nessus listin...
CVE-2000-0039
AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...
CVE-2000-0240
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. dot dot attack...
htdig.txt
software: ht://Dig URL: http://www.htdig.org/ Version: 3.1.4, 3.2.0b1 and previous Platforms: Unix, Win32, MacOS, Mac OS X Server Type: CGI, Input validation problem Vendor status: Notified, patch already available Date: 02/28/2000 Summary: Any remote user can view arbitrary files on your system...
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0153
FrontPage Personal Web Server PWS allows remote attackers to read files via a .... dot dot attack...
CVE-2000-0156
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability...
CVE-1999-0347
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character...