blogtorrent.txt

Intro ----- Blogtorrent is a collection of PHP scripts which are designed to make it simple to host files for transfer via bittorrent. Whilst it is not normal to report security problems in "preview" releases of software this software was covered prominently upon Slashdot and could be widely used...

STG Security Advisory 2004-11-22.10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-10 KorWeblog directory traversal vulnerability Revision 1.3 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== KorWeblog is a weblog application us...

EZshopper Directory Transversal in loadpage.cgi

Exploit for cgi platform in category web applications =============================================== EZshopper Directory Transversal in loadpage.cgi =============================================== Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.ht...

[Full-Disclosure] Sun Java Plugin arbitrary package access vulnerability

OVERVIEW ======== Sun Microsystem's Java Plugin connects the Java technology to web browsers and allows the use of Java Applets. Java Plugin technology is available for numerous platforms and supports major web browsers. A vulnerability in Java Plugin allows an attacker to create an Applet which...

[Full-Disclosure] cPanel hardlink backup issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: cPanel Vendor URL: http://www.cpanel.net Author: Karol Wisek [email protected] Date: July 19, 2004 Issue: cPanel backup feature allows logged in users to read any file, including they have not permission to read to. Description: cPanel i...

Directory traversal in Tridcomm 1.3

Luigi Auriemma Application: Tridcomm http://www.tridcomm.com Versions: = 1.3 Platforms: Windows Bug: directory traversal both download and upload Exploitation: remote, versus the built-in FTP server Date: 06 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

SUSE-SA:2004:035: samba

The remote host is missing the patch for the advisory SUSE-SA:2004:035 samba. The Samba server, which allows to share files and resources via the SMB/CIFS protocol, contains a bug in the sanitation code of path names which allows remote attackers to access files outside of the defined share. In...

Important: Red Hat Security Advisory: samba security update

Updated samba packages that fix an input validation vulnerability are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Karol Wiesek discovered an input validation issue in Samba prior to 3.0.6. An authenticated user could send a carefully crafted request to the...

Debian DSA-538-1 : rsync - unsanitised input processing

The rsync developers have discovered a security related problem in rsync, a fast remote file copy program, which offers an attacker to access files outside of the defined directory. To exploit this path-sanitizing bug, rsync has to run in daemon mode with the chroot option being disabled. It does...

Debian DSA-264-1 : lxr - missing filename sanitizing

Upstream developers of lxr, a general hypertext cross-referencing tool, have been alerted of a vulnerability that allows a remote attacker to read arbitrary files on the host system as user www-data. This could disclose local files that were not meant to be shared with the public. %NASLMINLEVEL...

Debian DSA-486-1 : cvs - several vulnerabilities

Two vulnerabilities have been discovered and fixed in CVS : - CAN-2004-0180 Sebastian Krahmer discovered a vulnerability whereby a malicious CVS pserver could create arbitrary files on the client system during an update or checkout operation, by supplying absolute pathnames in RCS diffs. -...

Sudo 1.6.8 - Information Disclosure

Sudo 1.6.8 - Information Disclosure // source: https://www.securityfocus.com/bid/11204/info Sudo is reported prone to an information disclosure vulnerability. This vulnerability presents itself when sudo is called with the '-e' option, or the 'sudoedit' command is invoked. In certain circumstance...

CVE-2002-1517

fsrefs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file...

GLSA-200404-13 : CVS Server and Client Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200404-13 CVS Server and Client Vulnerabilities There are two vulnerabilities in CVS; one in the server and one in the client. The server vulnerability allows a malicious client to request the contents of any RCS file to which the...

Mandrake Linux Security Advisory : htdig (MDKSA-2001:083)

A problem was discovered in the ht://Dig web indexing and searching program. Nergal reported a vulnerability in htsearch that allows a remote user to pass the -c parameter, to use a specific config file, to the htsearch program when running as a CGI. A malicious user could point to a file like...

Flash FTP Server - Directory Traversal

Flash FTP Server - Directory Traversal TestCode: C:\ftp localhost Connected to server. 220 Flash FTP Server v2.1 ready... User server:none: CoolICE 331 Password required for CoolICE. Password: 230 User CoolICE logged in. ftp get /winnt/system.ini 200 Port command successful. 150 Opening data...

Important: Red Hat Security Advisory: rsync security update

An updated rsync package that fixes a directory traversal security flaw is now available. Rsync is a program for synchronizing files over a network. Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to wri...

cvs security update

CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory affects both uses of CVS. A security problem which could allow a server to create arbitrary files on a client machine, and...

Microsoft MSN Messenger fails to properly validate file requests

Overview Microsoft MSN Messenger fails to properly validate file requests which could allow an attacker to view the contents of files on the victim's system. Description Microsoft MSN Messenger is an instant messaging application that allows users to collaborate with friends using text messages,...

PWebServer 0.3.x - Directory Traversal

PWebServer 0.3.x - Directory Traversal source: https://www.securityfocus.com/bid/9817/info It has been reported that PWebServer is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied URI requests. Information...