form-totaller.txt

Content-Type: Remote Root via vulnerible CGI software Date : 13/08/2000 Sender : s1gnal9 Subject : form-totaller Vulnerible CGI X-System : UNIX/NT systems running the form-totaller CGI software X-Status : s1gnal9-ADVISORY-form-totaller.txt X-Greets : Narr0w, f0bic, VetesGirl PRODUCT NAME:...

AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal

source: https://www.securityfocus.com/bid/1508/info Requesting a specially formed url containing encoding %2E to SimpleServer 1.06 and possibley earlier versions, will enable a remote user to gain read access to known files above the SimpleServer directory. http://target/%2E%2E/filename...

AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal

AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal source: https://www.securityfocus.com/bid/1508/info Requesting a specially formed url containing encoding %2E to SimpleServer 1.06 and possibley earlier versions, will enable a remote user to gain read access to known files above the SimpleServ...

Armada Design Master Index 1.0 - Directory Traversal

Armada Design Master Index 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/1772/info Master Index is a commercially supported search engine. Certain versions of this software ship with a path traversal vulnerability. This is to say that a remote user may 'back out' .../ of the...

University of Washington pop2d 4.464.514.544.55 - Remote File Read

University of Washington pop2d 4.464.514.544.55 - Remote File Read source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap...

bigbrother-1.4g.txt

/ Big Brother Exploit For ALL Versions prior to v.1.4h Desc: View the contents of any file on the remote system. Including /etc/passwd. Contributions: Identified and Proof of Concept by [email protected] and Loki LoA Greets and shouts to: smile, Vastervik, Self, alucard, RootHat, Lammie The...

CVE-2000-0526

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

alt-n WorldClient standard 2.1 - Directory Traversal

source: https://www.securityfocus.com/bid/1462/info The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any file of known location. Example:...

CVE-2000-0638

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the HOSTSVC parameter...

Sean MacGuire Big Brother 1.x - Directory Traversal

Sean MacGuire Big Brother 1.x - Directory Traversal source: https://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system...

CVE-2000-0590

Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the datadir parameter...

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0526

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0842

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...

Vulnerability in infosrch.cgi

SGI Security Advisory Title: Vulnerability in infosrch.cgi Number: 20000501-01-P Date: May 22, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon as soon as possible...

CVE-2000-0443

The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

HP JetAdmin 5.5.177jetadmin 5.6 - Directory Traversal

HP JetAdmin 5.5.177jetadmin 5.6 - Directory Traversal source: https://www.securityfocus.com/bid/1243/info By default JetAdmin Web Interface Server listens on port 8000. By requesting a specially formed URL which includes "../" it is possible for a remote user to gain read-access to any files...

CVE-2000-0436

MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...

FreeBSD-SA-00:18.gnapster.knapster

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:18 Security Advisory FreeBSD, Inc. Topic: gnapster/knapster ports allows remote users to view local files Category: ports Module: gnapster/knapster Announced: 2000-05-09...