ID Software Quake II Server 3.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/11551/info Multiple remote vulnerabilities have been reported to affect Quake II. These issues are due to boundary condition checking failures, access validation failures and failures to handle exceptional conditions. An attacker may leverage these issues...

LinuxStat 2.x - Directory Traversal

source: https://www.securityfocus.com/bid/11517/info It is reported that LinuxStat is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../' directory traversal sequences in the affected URI...

Niti Telecom Caravan Business Server 2.00-03D - Directory Traversal

source: https://www.securityfocus.com/bid/9555/info The showcode.asp script activated in Sampleshowcode.html may be vulnerable to a directory traversal issue. A remote attacker may view any files readable by the web server using '../' escape sequences in URI requests...

JBrowser 1.0/2.x - 'browser.php' Directory Traversal

source: https://www.securityfocus.com/bid/9535/info JBrowser has been reported to be vulnerable to directory traversal vulnerability that may allow a remote attacker to gain access to files readable by the web-server that reside outside of the server root directory. This issue is caused by...

Webfroot Shoutbox 2.32 - URI File Disclosure

Webfroot Shoutbox 2.32 - URI File Disclosure source: https://www.securityfocus.com/bid/7737/info Shoutbox is prone to directory traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to URI parameters. An attacker can exploit this vulnerability by...

W-Agora 4.1.6 - modules.php?File Traversal Arbitrary File Access

W-Agora 4.1.6 - modules.php?File Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/6595/info A file disclosure vulnerability has been reported for W-Agora. It has been reported that W-Agora does not adequately sanitize some user-supplied input. An attacker can construct a...

W-Agora 4.1.6 - 'index.php?bn' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/6595/info A file disclosure vulnerability has been reported for W-Agora. It has been reported that W-Agora does not adequately sanitize some user-supplied input. An attacker can construct a URL consisting of dot-dot-slash ../ character sequences to obtain...

EZ Systems HTTPBench 1.1 - Information Disclosure

source: https://www.securityfocus.com/bid/6153/info An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers. Information obtained in this manner may be used to launch further,...

EZ Systems HTTPBench 1.1 - Information Disclosure

EZ Systems HTTPBench 1.1 - Information Disclosure source: https://www.securityfocus.com/bid/6153/info An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers. Information obtained in...

Critical Path InJoin Directory Server 4.0 - File Disclosure

source: https://www.securityfocus.com/bid/4718/info Critical Path provides an LDAP Lightweight Directory Access Protocol Directory Server called InJoin. InJoin Directory Server is provided for Microsoft Windows operating systems and Unix variants. iCon is the administrative web interface for the...

BSCW symlink vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 BSCW Security Issues Vulnerability Type The BSCW software follows symlinks. Effect malicious user can read every file on system that BSCW UID can read. Software affected BSCW3.x only on ix systems Severity medium risk / high risk Solution install...

iXsecurity.20010618.policy_director.a

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iXsecurity Security Vulnerability Report No: iXsecurity.20010618.policydirector.a ========================================= Vulnerability Summary - ------------------- Problem: Web Seal Policy director does not handle URLs in hex code correct. It is...

sendtemp.pl Read Access to Files

Exploit for cgi platform in category web applications ================================ sendtemp.pl Read Access to Files ================================ !/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read...

CVE-2001-0031

CVE-2001-0031 affects BroadVision One-To-One Enterprise. The vulnerability allows a remote attacker to determine the physical path of the server’s files by requesting a non-existent .jsp file name. This is apath disclosure issue arising from how the application handles missing JSP requests, poten...

thttpd ssi: retrieval of arbitrary world-readable files

thttpd 2.19 and earlier server-side-includes CGI program ssi allows retrieval of arbitrary world-readable files Date: October 2, 2000 Application: thttpd 2.19 and before Author: ghandi [email protected] Vendor Status: merged patches into thttpd 2.20 Fix: upgrade into thttpd 2.20 1. Description...

Дырка в IBM HTTP Server

Используя определенное количество '/' в URL HTTP-запроса можно обратиться к корневой папке сервера и к любому файлу...

CVE-1999-0212

Technical details (affected products, components, versions, root cause, fix) are not provided in the connected documents. Monitor for updates; current sources only restate the vulnerability description without actionable details.

CVE-1999-0070

CVE-1999-0070 is associated with the generic test-cgi script vulnerability where an attacker can list files on the server. Red Hat and CVE listings confirm the issue stems from the test-cgi script. The Nessus plugin details an information-disclosure/remote command-execution style flaw: the script...

CVE-1999-0059

IRIX fam service allows an attacker to obtain a list of all files on the server...

Microsoft IIS 3.04.0 - Using ASP and FSO To Read Server Files

Microsoft IIS 3.04.0 - Using ASP and FSO To Read Server Files source: https://www.securityfocus.com/bid/230/info The File System Object FSO may be called from an Active Server Page ASP to display files that exist outside of the web server's root directory. FSO allows calls to be made utilizing...