247 matches found
CVE-2007-1859
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...
CVE-2007-1859
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...
CVE-2007-1859
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authenticati...
Moderate: Red Hat Security Advisory: xscreensaver security update
An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of screensavers. Alex Yamauchi discovered a fla...
MiniWebsvr 0.0.7 Remote Directory Transversal Exploit
No description provided by source. ------------------------------------------------------------- MiniWebsvr 0.0.7 Directory transversal vulnerability url: http://miniwebsvr.sourceforge.net/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org...
MiniWebsvr 0.0.7 Remote Directory Transversal Exploit
Exploit for multiple platform in category remote exploits ===================================================== MiniWebsvr 0.0.7 Remote Directory Transversal Exploit ===================================================== ------------------------------------------------------------- MiniWebsvr 0.0....
MiniWebsvr 0.0.7 - Remote Directory Traversal
MiniWebsvr 0.0.7 - Remote Directory Traversal ------------------------------------------------------------- MiniWebsvr 0.0.7 Directory transversal vulnerability url: http://miniwebsvr.sourceforge.net/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org...
Help Center Live Module.PHP远程目录遍历漏洞
Help Center Live是一款基于PHP的WEB应用程序。 Help Center Live不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'module.php'脚本对用户提交的"file"参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限执行任意命令。 Help Center Live Help Center Live 2.1.2 http://www.helpcenterlive.com/...
AEP SmartGate 4.3b - 'GET' Arbitrary File Download
/ prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, law enforcement, homeland security, public safety,...
Apache Tomcat 5.5.17 - Remote Directory Listing
Apache Tomcat 5.5.17 - Remote Directory Listing ScanAlert Security Advisory - http://www.scanalert.com Directory Listing in Apache Tomcat 5.x.x Date: 07/21/2006 Vendor: Apache Package: Tomcat Versions: 5.x.x 5.0.28, 5.5.12, 5.5.9, and 5.5.7 . Confirmed Credit: ScanAlert.s Enterprise Services Team...
Apache Tomcat < 5.5.17 - Remote Directory Listing
ScanAlert Security Advisory - http://www.scanalert.com Directory Listing in Apache Tomcat 5.x.x Date: 07/21/2006 Vendor: Apache Package: Tomcat Versions: 5.x.x 5.0.28, 5.5.12, 5.5.9, and 5.5.7 . Confirmed Credit: ScanAlert.s Enterprise Services Team. Overview: Apache Tomcat is the servlet contain...
Apache Tomcat < 5.5.17 Remote Directory Listing Vulnerability
No description provided by source. ScanAlert Security Advisory - http://www.scanalert.com Directory Listing in Apache Tomcat 5.x.x Date: 07/21/2006 Vendor: Apache Package: Tomcat Versions: 5.x.x 5.0.28, 5.5.12, 5.5.9, and 5.5.7 . Confirmed Credit: ScanAlert.s Enterprise Services Team. Overview:...
Apache Tomcat < 5.5.17 Remote Directory Listing Vulnerability
Exploit for multiple platform in category remote exploits ============================================================= Apache Tomcat 5.5.17 Remote Directory Listing Vulnerability ============================================================= ScanAlert Security Advisory - http://www.scanalert.com...
SecurityAlert SA025 : PHPNuke Remote Directory Traversal
Author: sp3x Date: 19. October 2005 Affected software : =================== PHPNuke version : 7.8 - 7.9 + patch 3.1 Description : ============= PHP-Nuke is a Web Portal System, storytelling software, News system, online community or w hatever you want to call it. The goal of PHP-Nuke is to have a...
phpMyAdmin 2.6.4-pl1 Remote Directory Traversal Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; SecurityReason.com TEAM Maksymilian Arciemowicz cXIb8O3 [email protected] Local file inclusion ./$FILE simple exploit phpMyAdmin 2.6.4-pl1 SecurityReason.com if @ARGV 3 print "\r\n SecurityReason TEAM\r\n"; print "cXIb8O3...
phpMyAdmin 2.6.4-pl1 Remote Directory Traversal Exploit
Exploit for unknown platform in category web applications ======================================================= phpMyAdmin 2.6.4-pl1 Remote Directory Traversal Exploit ======================================================= !/usr/bin/perl use IO::Socket; SecurityReason.com TEAM Maksymilian...
wagora240.txt
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability SEVERITY: ========= High SOFTWARE: ========= w-agora 4.2.0 http://w-agora.net INFO: ===== w-agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other...
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability SEVERITY: ========= High SOFTWARE: ========= w-agora 4.2.0 http://w-agora.net INFO: ===== w-agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other...
CVE-2003-1152
CVE-2003-1152 affects WebTide 7.04, where an HTTP request for %3f.jsp (encoded “?”) can cause remote attackers to list arbitrary directories. The vulnerability description confirms the issue exists in WebTide 7.04; no detailed root-cause or affected subcomponents are provided beyond this director...
Computalynx CProxy 3.3/3.4.x - Directory Traversal
source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose arbitrary files and carry out a denial of service...