2241 matches found
MTools 3.9.x MFormat Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9746/info It has been reported that mformat is prone to a privilege escalation vulnerability when installed as a setUID application. This issue is due to a design error allowing a user to create any arbitrary files as the...
whitsoft slimserve ftpd 1.0/2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2452/info SlimServ FTPd is a free ftp server distributed and maintained by WhitSoft Development. SlimServe FTPd is designed to offer ftp services to the Microsoft Windows platform. A problem with the SlimSoft FTP daemon...
Metainfo Sendmail 2.0/2.5,MetaIP 3.1
No description provided by source. source: http://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and MetaIP uses Java to communicate ba...
PlatinumFTPServer 1.0.6 Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6492/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possible for a remote...
Interbase 6.x External Table File Verification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7291/info A vulnerability has been reported for Interbase that may result in the corruption of arbitrary system files. The vulnerability exists due to insufficient checks performed when creating or manipulating external...
Kohana Framework 2.3.3 - Directory Traversal Vulnerability
No description provided by source. Title: ====== Kohana Framework v2.3.3 - Directory Traversal Vulnerability Date: ===== 2013-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=841 VL-ID: ===== 837 Common Vulnerability Scoring System:...
GTK+ 1.2.8 Arbitrary Loadable Module Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2165/info GTK+ is the Gimp Toolkit, freely available to the public and maintained by the GTK Development Team. A problem exists in the Gimp Toolkit that could allow a user elevated privileges. The problem occurs in the...
Lotus Domino Server 5.0.x Directory Traversal Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known...
FreeWnn 1.1.1 JServer Logging Option Data Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7918/info A vulnerability has been reported for FreeWnn that may result in an attacker obtaining elevated privileges. It has been reported that jserver may allow an attacker to corrupt arbitrary files. Due to this, an...
MySQL 3.20.32 a/3.23.34 Root Operation Symbolic Link File Overwriting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2522/info MySQL is a relational database management system RDBMS, freely available and open source. It is maintained by MySQL AB. A problem with the implementation of some MySQL databases may permit local users to overwri...
RobTex Viking Server 1.0.7 Relative Path Webroot Escaping Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2643/info The Viking Server is a freely available software package maintained and distributed by Robtex. The Viking Server provides multiple protocol service on Windows 95, 98, and NT systems. A problem in the software...
Fool's Workshop Owl's Workshop 1.0 resultsignore.php Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these...
SCO Unixware 7.1 'pkg' commands Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read any file on the...
QNAP Turbo NAS TS-1279U-RP Multiple Path Injection
No description provided by source. Exploit Title: QNAP Turbo NAS Multiple Path Injection Date: 2012-09-04 Exploit Author: Andrea Fabrizi Vendor Homepage: http://www.qnap.com/ Version: = 3.7.3 build 20120801 Tested on: QNAP TS-1279U-RP This vulnerability has been discovered on QNAP TS-1279U-RP, bu...
Fool's Workshop Owl's Workshop 1.0 glossaries/index.php file Parameter Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these...
Solaris 2.x/7.0/8 catman Race Condition Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by other user...
KDE KTVision 0.1 File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2913/info KTVision works with frame-grabber cards and KDE Unix K Desktop Environment to support TV video display on the PC screen. KTVision is vulnerable to symbolic link attacks. It is possible for an attacker to...
Fool's Workshop Owl's Workshop 1.0 newmultiplechoice.php Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these...
CGIScript.net csNews 1.0 Header File Type Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4994/info csNews is a script for managing news items on a website. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible for a malicious admin user to bypass file type...
Sun StarOffice 5.1 Arbitrary File Read Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1040/info StarOffice is a desktop office suite offered by Sun Microsystems. StarScheduler is a groupware server that ships with StarOffice and includes a webserver that runs as root by default. When a request it sent to a...