1657 matches found
CVE-1999-1005
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...
CVE-2000-0242
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters...
CVE-2000-0208
The htdig ht://Dig CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks in parameters to htsearch...
CVE-2000-0634
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0039
AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...
CVE-2000-0039
CVE-2000-0039 affects AltaVista search engine via a directory traversal vulnerability in the query.cgi CGI program, allowing remote attackers to read files above the document root by exploiting a .. (dot dot) parameter. The issue is documented across multiple sources (NVD, CVE List, Nessus listin...
CVE-2000-0240
vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. dot dot attack...
htdig.txt
software: ht://Dig URL: http://www.htdig.org/ Version: 3.1.4, 3.2.0b1 and previous Platforms: Unix, Win32, MacOS, Mac OS X Server Type: CGI, Input validation problem Vendor status: Notified, patch already available Date: 02/28/2000 Summary: Any remote user can view arbitrary files on your system...
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0153
FrontPage Personal Web Server PWS allows remote attackers to read files via a .... dot dot attack...
CVE-2000-0156
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability...
CVE-1999-0738
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0347
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character...
CVE-1999-0739
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-2000-0132
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function...
Microsoft Virtual Machine 2000 - Series/3000 Series getSystemResource
source: https://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream function. The filename must be specified, and must be in certain paths...
PT-2000-1112 · Microsoft · Iis
Name of the Vulnerable Software and Affected Versions: IIS versions 3 and 4 Description: The issue allows remote attackers to read files via a .. dot dot attack, potentially exposing sensitive information. This is made possible by sample Internet Data Query IDQ scripts in the affected IIS version...
Oracle 8.1.7 - JSP/JSPSQL Remote File Reading
source: https://www.securityfocus.com/bid/2288/info A problem with Oracle on the Windows 2000 platform could allow users access to restricted information. This problem in the handling of input by the Oracle software may result in remote users being permitted read access to files on the same...
CVE-1999-0270
Directory traversal vulnerability in pfdispaly.cgi program sometimes referred to as "pfdisplay" for SGI's Performer API Search Tool performertools allows remote attackers to read arbitrary files...