MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...

AldWeb MiniPortail 1.9/2.x LNG Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8504/info cross-site scripting vulnerability has been reported for miniPortail. The vulnerability exists due to insufficient sanitization of some user-supplied values. Specifically, malicious HTML code is not sanitized fr...

Web Wiz Forums 7.x Registration_Rules.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10555/info A vulnerability exists in the Web Wiz Forums software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data passe...

XFree86 X11R6 3.3.5/3.3.6/4.0 Xserver Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1235/info A denial of service exists in XFree86 3.3.5, 3.3.6 and 4.0. A remote user can send a malformed packet to the TCP listening port, 6000, which will cause the X server to be unresponsive for some period of time...

viscacha 0.8.1 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level...

EType EServ 2.9x POP3 Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6520/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user...

ZyXEL Prestige 681 SDSL Router IP Fragment Reassembly Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, the router crashes. The...

hammer software metagauge 1.0.0.17 - Directory Traversal vulnerability

No description provided by source. Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest...

Netscape Enterprise Web Server for Netware 4/5 5.0 Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/4874/info It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user. Netscape Enterprise Web Server for Netware contain several sample files which leak system...

Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed...

Microsoft Windows 2000/NT Terminal Server Service RDP DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3445/info Due to a flaw in the implementation of RDP in Windows 2000/NT Terminal Server, it is possible for a remote user to cause a host to stop responding. Sending malformed RDP packets to a host could cause a denial of...

informs picserver 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2339/info It is possible for a remote user to gain read access to directories and files outside the root directory of a PicServer. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose an...

Lotus Domino Server 5.0.x Directory Traversal Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known...

PHPOutsourcing Zorum 3.x Remote Include Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrary PHP script containing commands...

Symantec Gateway Security 5400 Series 2.0 Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting attacks. The issue is reported to exist due to...

Cisco LEAP Password Disclosure Weakness

No description provided by source. source: http://www.securityfocus.com/bid/8755/info It has been reported that Cisco LEAP Lightweight Extensible Authentication Protocol is prone to a password disclosure weakness that may allow a remote user to steal user passwords. The issue may be exploited out...

Network Tool 0.2 PHPNuke Addon Metacharacter Filtering Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3552/info Network Tool is a PHPNuke addon, written and maintained by Rick Fournier. It is designed to offer network features such as nmap, traceroute, and ping from a web interface. A problem with the package has been...

faust informatics freestyle chat 4.1 sr2 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2776/info Freestyle Chat server from Faust Informatics incorporates interactive chat functionality into websites. Versions of Freestyle Chat are vulnerable to directory traversal attacks. This can allow a remote user to...

Microsoft IE 5.0.1/5.5/6.0 Telnet Client File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2463/info Services for Unix 2.0 contains a client side logging option which records all information exchanged in a telnet session. A vulnerability exists that could enable a remote user to invoke the telnet client and...

IBM Websphere/Net.Commerce 3 CGI-BIN Macro Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2588/info Net.Commerce is part of the Websphere platform of products distributed by IBM. Net.Commerce provides several versatile features to facilitate e-commerce, and features in performance and reliability. A problem in...