662 matches found
CVE-2004-2105
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...
CVE-2005-1408
Apple Keynote 2.0/2.0.1 is affected by CVE-2005-1408 due to a flaw in the keynote: URI handler that can be triggered by a crafted Keynote presentation. The vulnerability allows remote attackers to read arbitrary files on the local system. The related Nessus NASL entry confirms the issue exists in...
security flaw
PHP 4.0 with cURL functions allows remote attackers to bypass the openbasedir setting and read arbitrary files via a file: URL argument to the curlinit function...
CVE-2005-1295
Technical details (affected products, precise root cause, affected versions, and exploitability) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2005-0864
The CVE-2005-0864 entry concerns the Boa web server, used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products. The vulnerability allows remote attackers to read arbitrary files by supplying a full path in the HTTP request (path traversal). Reported impact is partial breach of confident...
LimeWire 4.1.2 4.5.6 - GET Remote File Read
LimeWire 4.1.2 4.5.6 - GET Remote File Read !/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote and fucking lame exploit written by lammat http://grpower.ath.cx [email protected] Discovered by Kevin Walsh use IO::Socket; $host = @ARGV0; $file = @ARGV1; unless @ARGV == 2 print "usage: $0 host file\n"; pri...
LimeWire 4.1.2 < 4.5.6 - 'GET' Remote File Read
!/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote and fucking lame exploit written by lammat http://grpower.ath.cx [email protected] Discovered by Kevin Walsh use IO::Socket; $host = @ARGV0; $file = @ARGV1; unless @ARGV == 2 print "usage: $0 host file\n"; print "E.g: $0 10.0.0.2 /etc/passwd\n"; exit @r...
CVE-2005-0520
ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...
security flaw
Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...
CVE-2004-1392
CVE-2004-1392 affects PHP 4.0 with the curl extension: remote attacker can bypass open_basedir and read arbitrary files via a file:// URL argument to curl_init. Public advisories RHSA-2005:405/406 (CentOS/Red Hat) describe updated PHP packages that fix this issue (curl_safe-file lookup; can impac...
CVE-2005-0313
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to 1 upload arbitrary files via certain parameters to upload.php or 2 read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete...
CVE-2004-0122
CVE-2004-0122 is described as affecting Microsoft MSN Messenger 6.0 and 6.1, allowing remote attackers to read arbitrary files via improper handling of certain requests. Connected advisories for pidgin/libpurple reference a related directory-traversal issue in the MSN protocol plugin (slp.c) that...
CVE-2002-1252
The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...
PT-2004-1313 · Microsoft · Msn Messenger
Name of the Vulnerable Software and Affected Versions: Microsoft MSN Messenger versions 6.0 through 6.1 Description: The issue allows remote attackers to read arbitrary files due to improper handling of certain requests. Recommendations: For Microsoft MSN Messenger versions 6.0 through 6.1, at th...
DEBIAN-CVE-2004-0129
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in the what parameter...
CVE-2003-0626
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...
CVE-2003-0753
nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphpconfigLangFile parameter...
CVE-2003-0294
The CVE-2003-0294 issue affects php-proxima (version 6.0 and earlier) where autohtml.php contains a flaw in the modload operation that allows remote attackers to read arbitrary files via the name parameter. This is documented across multiple sources (NVD/NVD clone, CVE records, and a Tenable Ness...
[SECURITY] [DSA 264-1] New lxr packages fix information disclosure
-------------------------------------------------------------------------- Debian Security Advisory DSA 264-1 [email protected] http://www.debian.org/security/ Martin Schulze March 19th, 2003 http://www.debian.org/security/faq -...