CVE-2005-2600

FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...

CVE-2005-2600

CVE-2005-2600 is described in connected sources as a vulnerability in the tree view of FUD Forum Bulletin Board Software (also present in phpgroupware/egroupware imports) that allows remote attackers to read private posts by modifying the mid parameter. The OpenVAS entries reference this CVE with...

CVE-2005-2600

FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...

CVE-2005-2600

FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...

[Full-disclosure] Fudforum: incompletely check of user rights in tree view gaining access to all messages

Hello, We have found a security problem in the tree view of FUD Forum Bulletin Board Software http://www.fudforum.org in version 2.6.15, earlier versions maybe affected as well. Description: If a user enables tree view of messages he is able to view any message on the system, no matter he has the...

fudForum.txt

--Apple-Mail-1--543733574 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Hello, We have found a security problem in the tree view of FUD Forum Bulletin Board Software http://www.fudforum.org in version 2.6.15, earlier versions maybe affected a...

DEBIAN-CVE-2005-1849

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...

zlib DoS

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...

security flaw

Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...

CVE-2005-1460

Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...

CVE-2005-1460

CVE-2005-1460 affects Ethereal (and tethereal) prior to 0.10.11. Descriptions in connected sources indicate multiple unknown dissectors can be exploited remotely to trigger an assertion error, causing a denial of service. Public details consistently cite upgrade to version 0.10.11 as the remediat...

CVE-2005-1460

Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error via an invalid protocol tree item length...

[SECURITY] [DSA 696-1] New perl packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 696-1] New perl packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...

DSA-696-1 perl - design flaw

Bulletin has no description...

serverview 3.0 - insecure file permissions

date: 06.09.2004 author: l0om - l0om at excluded d0t org - www.excluded.org product: serverview problem: insecure file permissions version: 3.0??? serverview is a server management product from fujitsu siemens which is shipped with every PRIMERGY server. it is based on snmp an let you view and se...

CVE-2002-1928

602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "" tilde or ".bak" extension...

web602dir.pl

/usr/bin/perl web602 cezch version driectory tree exploit.. Written by eip aka deadbeat aka AnGrYSQl use IO::Socket; print "\nWeb602 czech version Directory Tee Exploit\n"; if !$ARGV\n"; $host = $ARGV0; $sox = IO::Socket::INET-new Proto="tcp", PeerPort="80", PeerAddr=$host, ; print "Connected..DO...

interSEC security advisory - Multiple bugs in Web602 web server

=== interSEC - Advisory ================================= Adv. ID: 2002-10-001 == Advisory Information -------------------- Name : Multiple bugs in Web602 web server Vendor Homepage : http://www.software602.cz Platforms : Windows Vulnerability Type : Multiple bugs Vendor Contacted : 30/08/2002...

CVE-1999-1528

ProSoft Netware Client 5.12 for Macintosh MacOS 9 fails to log a user out of the NDS tree on system logout, potentially allowing other local users to access an unprotected NDS session. This CVE (CVE-1999-1528) is described in public records as a local-privilege/access concern with partial confide...