BEA's WebLogic force handlers show code vulnerability

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory BEA's WebLogic force handlers show code vulnerability ---------------------------------------------------------------------- FS Advisory ID: FS-072800-9-BEA Release Date: July 28, 2000 Product: WebLogic...

bajie.webserver.txt

More junk brought to you by the MDMA Crew Two security flaws in the Bajie Webserver Bajie is a freeware HTTP daemon written in Java and available from TuCows. We found two vulnerabilities in it... The sample Java servlet at /servlet/test/pathInfo/test gives away a real path eg. /www/html or...

Armada Design Master Index 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/1772/info Master Index is a commercially supported search engine. Certain versions of this software ship with a path traversal vulnerability. This is to say that a remote user may 'back out' .../ of the web root directory and view/download any file which...

poll_it.txt

The CGI is available from: http://www.cgi-world.com/pollit.html The bug takes place when calling the CGI and passing it parameters that overwrite settings initialized in the CGI: /cgi-bin/pollit/PollItSSIv2.0.cgi?datadir=/etc/passwd%00 Because the CGI initializes it's internal variables before...

Mailstudio2000 CGI Vulnerabilities [S0ftPj.4]

SPJ-004-000: .::::::::+ s0ftpr0ject 2K +::::::::. ::::+ Digital Security for Y2K +:::: :::'""""'""""'""""'""""'""'""::: ::'.gS$"$Sn. .gS$"$Sn. Sn.:: :: $$$$$ $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$$$$$n $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$s$$$$' $$$$ :: :: $$$$$ $$$$$ $$$$$...

HP Web JetAdmin Version 5.6 Web interface Server Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP Web JetAdmin Version 5.6 Web interface Server Directory Traversal Vulnerability USSR Advisory Code: USSR-2000041 Release Date: May 24, 2000 Affected Software Versions HP Web JetAdmin Version 5.6 Microsoft Windows 2000 HP Web JetAdmin Version 5.6...

MetaProducts Offline Explorer 1.0 x/1.1 x/1.2 x - Directory Traversal

source: https://www.securityfocus.com/bid/1231/info MetaProducts Offline Explorer is an application that allows a user to download the contents of a website or FTP site for offline browsing at a later time. It is possible to view known files on a system Offline Explorer resides on. By default,...

ultrascripts ultraboard 1.6 - Directory Traversal

ultrascripts ultraboard 1.6 - Directory Traversal source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Window...

Security Bug in Jana HTTP Server

Hello Bugtraqers, I found a directory travelling bug again, this time in JANA HTTP Server software available as freeware from http://www.jana-server.ocm.de . Here is a copy of the mail I sended to the author. eAX -------------------------------------------- Hello Thomas, I got your proxy/perver...

CVE-1999-0776

The CVE-1999-0776 entry concerns the Alibaba HTTP server and a directory-traversal vulnerability that allows remote attackers to read files via a .. (dot dot) path. Affected software is Alibaba HTTP server; vulnerability type is directory traversal/ improper input handling leading to partial conf...

Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal (MS00-006)

Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal MS00-006 source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the...

Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 - Directory Traversal (MS00-006)

source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the physical path and filename of the requested file, and the ACL for the file mus...

iis4.webhits.txt

Cerberus Information Security Advisory CISADV000126 http://www.cerberus-infosec.co.uk/advisories.html Released : 26th January 2000 Name : Webhits.dll buffer truncation Affected Systems: Microsoft Windows NT 4 running Internet Information Server 4 All service Packs Issue : Attackers can access fil...

CVE-1999-0270

The CVE-1999-0270 issue affects SGI’s Performer API Search Tool (performer_tools) through the pfdispaly.cgi (pfdisplay) CGI on IRIX. It is a directory traversal vulnerability that allows remote attackers to read arbitrary files, due to a path traversal flaw in pfdispaly.cgi. The documented impact...

Phorum 3.0.7 - 'auth.php3' Backdoor Access

source: https://www.securityfocus.com/bid/2274/info Phorum is a freely available, open source, popular WWW Board written by Brian Moon. It is designed to enhance the services offered on a web page, allow users to interact with one another through bulletin board chat and discussion. A problem with...

Phorum 3.0.7 - auth.php3 Backdoor Access

Phorum 3.0.7 - auth.php3 Backdoor Access source: https://www.securityfocus.com/bid/2274/info Phorum is a freely available, open source, popular WWW Board written by Brian Moon. It is designed to enhance the services offered on a web page, allow users to interact with one another through bulletin...

groupwise.web.txt

Problems found with GroupeWise web server Novell was contacted 3 weeks ago and no reply ----------------------------------------------------------------- 1. The help argument in GWWEB.EXE reveal full web path on the server 2. anyone can read a .htm file on the system with the GWWEB.EXE and the HE...

mailgear-1.0.txt

Symantec Mail-Gear 1.0 Web interface Server Directory Traversal Vulnerability PROBLEM UssrLabs found a Symantec Mail-Gear 1.0 Web interface Server Directory Traversal Vulnerability Using the string '../' in a URL, an attacker can gain read access to any file outside of the intended web-published...

Microsoft Internet Explorer 5 (Windows 95/98/2000/NT 4.0) - XML HTTP Redirect

MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a malicious web site owner to read files on a visiting user's computer. A web page...

CVE-1999-1051

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the replymessageattach attachment parameter...