CVE-2005-2995

CVE-2005-2995 affects Bacula (e.g., bacula-common/bacula 1.36.3 and earlier). The issue allows local users to read/modify sensitive files via symlink attacks on temporary files: (1) the autoconf/randpass temp file used when openssl is unavailable, and (2) the mtx.[PID] temporary file in mtx-chang...

CVE-2005-2995

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...

CVE-2005-2995

bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

RO CP root exploit

effects all versions of ROCP on an apache based system how it is done first of all i was testing on my friends ragnarok server witch uses ROCP Version 4.3.4a on an apache based system and so i was stunmling through various files i shouldnt have access to such as...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the 1 data or 2 torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root (in the data or torrents directories) with insufficient access control, enabling remote bidders to obtain sensitive information such as account names and password hashes (e.g., via data/newusers). Affected software: ...

McGallery 1.01.1 - Lang Argument File Disclosure

McGallery 1.01.1 - Lang Argument File Disclosure source: https://www.securityfocus.com/bid/13963/info McGallery is prone to a file disclosure vulnerability. This could let remote attackers access files on the computer in the context of the Web server process...

Ipswitch IMail Web Calendaring Server GET Request Traversal Arbitrary File Access

The remote server is running Ipswitch IMail Web calendaring. The remote version of this software is vulnerable to a directory traversal attack. An attacker, exploiting this vulnerability, may be able to retrieve sensitive files present on the server. %NASLMINLEVEL 70300 C Tenable Network Security...

remote command execution in citat.pl script

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN citat.pl SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...

remote command execution in forum.pl script

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN forum.pl SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...

index.cgi script XSS + file show

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN index.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing http://www.target.com/index.cgi?/etc/passwd 2CSS...

remote command execution in include.cgi script

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN include.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...

CVE-2005-1136

Simple PHP Blog sphpBlog 0.4.0 stores the 1 password.txt and 2 config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files...

CVE-2005-1136

Simple PHP Blog sphpBlog 0.4.0 stores the 1 password.txt and 2 config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files...

Lime Wire Multiple Remote Unauthorized Access

The remote host seems to be running Lime Wire, a P2P file sharing program. This version is vulnerable to remote unauthorized access flaws. An attacker can access to potentially sensitive files on the remote vulnerable host. C Tenable Network Security, Inc. include"compat.inc"; if description...

CIS WebServer 3.5.13 - Directory Traversal

source: https://www.securityfocus.com/bid/12662/info A vulnerability has been identified in the handling of certain types of requests by CIS WebServer. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. The problem is in the handling of directory...

sd server 4.0.70 - Directory Traversal

sd server 4.0.70 - Directory Traversal source: https://www.securityfocus.com/bid/12609/info A vulnerability has been identified in the handling of certain types of requests by SD Server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read...

sd server 4.0.70 - Directory Traversal

source: https://www.securityfocus.com/bid/12609/info A vulnerability has been identified in the handling of certain types of requests by SD Server. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read privileges granted to these files would be...