43 matches found
Design/Logic Flaw
Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...
CVE-2010-3402
Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...
CVE-2010-3402
CVE-2010-3402 affects IDM Computer Solutions UltraEdit (notably v16.20.0.1009 and v16.10.0.1036). The vulnerability stems from an untrusted search path that enables DLL hijacking via a Trojan horse dwmapi.dll placed in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak,...
CVE-2010-3402: Undefined Security Weakness
Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same...
KLA10376 ACE vulnerability in UltraEdit
An untrusted path vulnerability was found in UltraEdit. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely via a library hijack. Original advisories - Exploitation Related products UltraEdit CVE list...
Healing hands as easily crack encrypted PDF file-vulnerability warning-the black bar safety net
PDF is a common E-BOOK format, but some PDF files for some reason encrypted, the e-book The print and copy functions shut off, thus using up more trouble, in fact we as long as the PDF file Reader software Acrobat Reader a slight bit of modification, you can cancel the print and copy restrictions...
UltraEdit FTP/SFTP LIST命令目录遍历漏洞
BUGTRAQ ID: 29784 UltraEdit是HTML、HEX文本和PHP、Perl等编程语言的多用途编辑器。 UltraEdit内置的FTP/SFTP浏览器没有正确地过滤FTP服务器响应LIST命令所返回文件名中的斜线和反斜线。如果用户受骗从服务器下载了整个目录的话，就可能导致向用户机器上的任意位置写入文件。 IDM Computer Solutions UltraEdit 14.00b IDM Computer Solutions ---------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2008-2795
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot or a ..\ dot dot backslash in a response to a LIST command...
CVE-2008-2795
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot or a ..\ dot dot backslash in a response to a LIST command...
CVE-2008-2795
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot or a ..\ dot dot backslash in a response to a LIST command...
CVE-2008-2795
The CVE refers to IDM Computer Solutions UltraEdit 14.00b where the FTP/SFTP client is vulnerable to directory traversal via a LIST response, enabling a remote server to create or overwrite arbitrary files using .. or ..\ sequences. Root cause is improper handling of directory components in the L...
CVE-2008-2795: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot or a ..\ dot dot backslash in a response to a LIST command...
UltraEdit 14.00b - FTP/SFTP 'LIST' Directory Traversal
source: https://www.securityfocus.com/bid/29784/info UltraEdit is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the FTP/SFTP client. Exploiting this issue will allow an attacker to write arbitrary file...
UltraEdit 14.00b - FTPSFTP LIST Directory Traversal
UltraEdit 14.00b - FTPSFTP LIST Directory Traversal source: https://www.securityfocus.com/bid/29784/info UltraEdit is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the FTP/SFTP client. Exploiting this...
KLA10375 WLF vulnerability in UltraEdit
A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Exploitation Public exploits exist for this...
Clever use of WinRAR will be confidential camouflage was imperceptible-vulnerability warning-the black bar safety net
WinRAR is everyone commonly used compression/decompression program, in addition to this we also often put WinRAR as encryption software to use, in the compressed file when the Set password can protect the data of the object. But specifically for WinRAR password hack software very much, although...
The Common Market encrypted disc crack not full tricks big secret-vulnerability warning-the black bar safety net
Now on the market there are many encrypted discs, these discs are a special form of burn. Put it into drive, it will appear a software installation screen want you to enter the serial number, if serial number is correct it will appear a file browser window, the error then jumps back to the deskto...
The Common Market encrypted disc crack not full tricks big secret-vulnerability warning-the black bar safety net
Now on the market there are many encrypted discs, these discs are a special form of burn. Put it into drive, it will appear a software installation screen want you to enter the serial number, if serial number is correct it will appear a file browser window, the error then jumps back to the deskto...
CVE-2001-0983
The CVE-2001-0983 entry concerns UltraEdit, where FTP passwords are stored in the uedit32.ini file using weak encryption. This weakness allows local users who can read the file to decrypt passwords and potentially gain privileges. The available connected documents corroborate UltraEdit as the aff...