Newsletter 35

RSA Web site defaced Amazon.com, eBay & CNN all targeted with DDoS President Clinton convenes meeting on internet security Infosec professionals like yourself can't afford to miss out on late breaking news, in-depth analysis, product reviews and more in each issue of Information Security Magazine...

GeoCel WindMail 3.0 - Remote File Read

GeoCel WindMail 3.0 - Remote File Read source: https://www.securityfocus.com/bid/1073/info WindMail is a command-line mailer that can be integrated with perl cgi applications to create form-mail capability for a website. WindMail 3.0 and possibly previous versions can be used to retrieve any asci...

GeoCel WindMail 3.0 - Remote File Read

source: https://www.securityfocus.com/bid/1073/info WindMail is a command-line mailer that can be integrated with perl cgi applications to create form-mail capability for a website. WindMail 3.0 and possibly previous versions can be used to retrieve any ascii file that the webserver has read acce...

CVE-1999-0870

Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste...

PT-1998-1120 · Bnbform · Bnbform

Name of the Vulnerable Software and Affected Versions: BNBForm affected versions not specified Description: The issue allows remote attackers to read arbitrary files. This is achieved via the automessage hidden form variable. Recommendations: At the moment, there is no information about a newer...

PT-1997-1077 · Unknown · View-Source Cgi

Name of the Vulnerable Software and Affected Versions: view-source CGI program affected versions not specified Description: The issue allows remote attackers to read arbitrary files via a .. dot dot attack. Recommendations: At the moment, there is no information about a newer version that contain...

SunView (SunOS 4.1.1) - selection_svc Remote File Read

SunView SunOS 4.1.1 - selectionsvc Remote File Read Source: https://www.securityfocus.com/bid/8/info On Sun3 and Sun4 systems, a remote system can read any file that is readable to the user running SunView. On the 386i, a remote system can read any file on the workstation running SunView regardle...