CVE-2015-1000005: Improper Limitation of a Pathname to a Restricted Directory

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite allows a perpetrator to read arbitrary files.

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a maliciou...

The vulnerability of the MDS PulseNET system for monitoring and managing network traffic allows a hacker to read or delete any files they desire.

The vulnerability of the MDS PulseNET network monitoring and management system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to read or delete arbitrary files using the full path to the directory...

The vulnerability of the ZENworks Configuration Management software allows a perpetrator to execute arbitrary code.

The vulnerability of the ZENworks Configuration Management information system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted directory name specified ...

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

HP Data Protector EXEC_INTEGUTIL Remote Code Execution

This exploit abuses a vulnerability in the HP Data Protector. The vulnerability exists in the Backup client service, which listens by default on TCP/5555. The EXECINTEGUTIL request allows to execute arbitrary commands from a restricted directory. Since it includes a perl executable, it's possible...

CVE-2013-4097: Improper Limitation of a Pathname to a Restricted Directory

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error message...

CVE-2013-0895: Improper Limitation of a Pathname to a Restricted Directory

Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors...

CVE-2013-0629: Undefined Security Weakness

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013...

CVE-2011-0494: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might...

Microsoft IIS authentication bypass

It's possible to access restricted directory by using request like “http://victim.com/SecretFolder:$I30:$IndexAllocation/...

rssh restricted shell protection bypass

With rsshchroothelper it's possible to chroot behind restricted directory...

sudo.info.txt

Date: Tue, 8 Jun 1999 21:23:55 +0200 From: Bencsath Boldizsar To: [email protected] Subject: unneeded information in sudo Sudo debian , v1.5.6p2-2 tells anyone if a file exists or not. It's not a very big problem, but when i set a directory not accessible to anyone but root, I want to make sur...

PT-1997-1084 · Linux · Linux Tftp

Name of the Vulnerable Software and Affected Versions: Linux TFTP affected versions not specified Description: The issue allows access to files outside the restricted directory in Linux implementations of TFTP. Recommendations: At the moment, there is no information about a newer version that...