CVE-2001-0476

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via 1 a long HTTP query string, or 2 a long tmpl parameter...

CVE-2001-0476

Aspseek vulnerable component: s.cgi in Aspseek 1.03 and earlier. Root cause: multiple buffer overflows in s.cgi allow remote attackers to execute arbitrary commands via (1) a long HTTP query string or (2) a long tmpl parameter. Impact: remote command execution with partial confidentiality/integri...

CVE-2001-0476

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via 1 a long HTTP query string, or 2 a long tmpl parameter...

Aspseek Buffer Overflow

|---------------------------------------------------------------------------------------| / Product: Aspseek Search Engine. Vendor URL: www.aspseek.org / Tested on: v1.0.0 - v1.0.3 Freeware Linux Vendor Contact: Mailed on 8th March NO Reply Vendor Patched though / |-- The Problem,...

Дырки Netscape Server

Переполнение буфера в сегменте кучи при обращении к LDAP-gateway Серверу. Кроме того, некорректный GET-запрос приводит к краху поисковой системы...

Linux news 25.08.00

Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...

Armada Design Master Index 1.0 - Directory Traversal

Armada Design Master Index 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/1772/info Master Index is a commercially supported search engine. Certain versions of this software ship with a path traversal vulnerability. This is to say that a remote user may 'back out' .../ of the...

CVE-2000-0039

CVE-2000-0039 affects AltaVista search engine via a directory traversal vulnerability in the query.cgi CGI program, allowing remote attackers to read files above the document root by exploiting a .. (dot dot) parameter. The issue is documented across multiple sources (NVD, CVE List, Nessus listin...

CVE-2000-0039

AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...

Sojourn Search Engine sojourn.cgi cat Parameter Traversal Arbitrary File Access

The 'sojourn.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10349;...

CVE-2000-0180

Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...

Generation Terrorists Designs & Concepts Sojourn 2.0 - File Access

source: https://www.securityfocus.com/bid/1052/info Any file that the webserver has read access to can be read on a server running the Sojourn search engine. The Sojourn software includes the ability to organize a website into categories. These categories can then be accessed via the sojourn.cgi...

The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion

The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the...

The ht://Dig Group ht://Dig 3.1.1/3.1.2/3.1.3/3.1.4/3.2 .0b1 - Arbitrary File Inclusion

source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the opening singlw quote character is taken as a path to a file for inclusion, for...

asp.runtime-error.txt

Forwarded with permission of the author. Please direct all replies to [email protected]. Ben Greenbaum Director of Site Content Security Focus http://www.securityfocus.com ---------- Forwarded message ---------- Description: ============ Active server pages ASP with runtime errors expose a security...

CVE-2000-0039

AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...

AltaVista Search Intranet 2.0 b2.3 - Directory Traversal

AltaVista Search Intranet 2.0 b2.3 - Directory Traversal source: https://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all...

AltaVista Search Intranet 2.0 b/2.3 - Directory Traversal

source: https://www.securityfocus.com/bid/896/info The AltaVista Search engine sets up a webserver at port 9000 to listen for search queries. The main search function will accept a single '../' string in the query, providing access to all documents in the 'http' directory one level up. These...

RFP9905.zeus.remote.root.txt

--- Advisory RFP9905 ------------------------------- rfp.labs ----------- Remote root compromise via Zeus webserver Zeus-search vulnerability --------------------------------- rain forest puppy / [email protected] -- Table of contents: - 1. Scope of problem - 2. Solution - 3. Miscellaneous Updates...

swish-E.txt

Date: Mon, 9 Nov 1998 22:00:33 +0100 From: Job de Haas To: [email protected] Subject: Vulnerabilities with Swish -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, While installing the Swish search engine http://sunsite.berkeley.edu/SWISH-E at our site http://www.itsx.com we discovered sever...