747 matches found
HP Web JetAdmin Version 5.6 Web interface Server Directory Traversal Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP Web JetAdmin Version 5.6 Web interface Server Directory Traversal Vulnerability USSR Advisory Code: USSR-2000041 Release Date: May 24, 2000 Affected Software Versions HP Web JetAdmin Version 5.6 Microsoft Windows 2000 HP Web JetAdmin Version 5.6...
MetaProducts Offline Explorer 1.0 x/1.1 x/1.2 x - Directory Traversal
source: https://www.securityfocus.com/bid/1231/info MetaProducts Offline Explorer is an application that allows a user to download the contents of a website or FTP site for offline browsing at a later time. It is possible to view known files on a system Offline Explorer resides on. By default,...
ultrascripts ultraboard 1.6 - Directory Traversal
ultrascripts ultraboard 1.6 - Directory Traversal source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Window...
Security Bug in Jana HTTP Server
Hello Bugtraqers, I found a directory travelling bug again, this time in JANA HTTP Server software available as freeware from http://www.jana-server.ocm.de . Here is a copy of the mail I sended to the author. eAX -------------------------------------------- Hello Thomas, I got your proxy/perver...
CVE-1999-0776
The CVE-1999-0776 entry concerns the Alibaba HTTP server and a directory-traversal vulnerability that allows remote attackers to read files via a .. (dot dot) path. Affected software is Alibaba HTTP server; vulnerability type is directory traversal/ improper input handling leading to partial conf...
Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 - Directory Traversal (MS00-006)
source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the physical path and filename of the requested file, and the ACL for the file mus...
Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal (MS00-006)
Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal MS00-006 source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the...
iis4.webhits.txt
Cerberus Information Security Advisory CISADV000126 http://www.cerberus-infosec.co.uk/advisories.html Released : 26th January 2000 Name : Webhits.dll buffer truncation Affected Systems: Microsoft Windows NT 4 running Internet Information Server 4 All service Packs Issue : Attackers can access fil...
CVE-1999-0270
The CVE-1999-0270 issue affects SGI’s Performer API Search Tool (performer_tools) through the pfdispaly.cgi (pfdisplay) CGI on IRIX. It is a directory traversal vulnerability that allows remote attackers to read arbitrary files, due to a path traversal flaw in pfdispaly.cgi. The documented impact...
Phorum 3.0.7 - auth.php3 Backdoor Access
Phorum 3.0.7 - auth.php3 Backdoor Access source: https://www.securityfocus.com/bid/2274/info Phorum is a freely available, open source, popular WWW Board written by Brian Moon. It is designed to enhance the services offered on a web page, allow users to interact with one another through bulletin...
Phorum 3.0.7 - 'auth.php3' Backdoor Access
source: https://www.securityfocus.com/bid/2274/info Phorum is a freely available, open source, popular WWW Board written by Brian Moon. It is designed to enhance the services offered on a web page, allow users to interact with one another through bulletin board chat and discussion. A problem with...
groupwise.web.txt
Problems found with GroupeWise web server Novell was contacted 3 weeks ago and no reply ----------------------------------------------------------------- 1. The help argument in GWWEB.EXE reveal full web path on the server 2. anyone can read a .htm file on the system with the GWWEB.EXE and the HE...
mailgear-1.0.txt
Symantec Mail-Gear 1.0 Web interface Server Directory Traversal Vulnerability PROBLEM UssrLabs found a Symantec Mail-Gear 1.0 Web interface Server Directory Traversal Vulnerability Using the string '../' in a URL, an attacker can gain read access to any file outside of the intended web-published...
Microsoft Internet Explorer 5 (Windows 95/98/2000/NT 4.0) - XML HTTP Redirect
MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a malicious web site owner to read files on a visiting user's computer. A web page...
CVE-1999-1051
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the replymessageattach attachment parameter...
Eserv.txt
---------- Forwarded message ---------- Date: Thu, 4 Nov 1999 18:26:52 -0600 From: [email protected] To: [email protected] Subject: BOUNCE [email protected]: Approval required: Eserv 2.50 Web interface Server Directory Traversal Vulnerability Product: Eserv/2.50 is the...
ftgate.web.txt
FTGate Version 2.1 Web interface Server Directory Traversal Vulnerability Product: FTGate Version 2.1 FTGate has many advanced features including: - Proxy Support , Kill List , Advanced delivery options, Logging , Address Mapping- - Domain Aliases, File import , Full Multithreading, HTML Interfac...
Pacific Software URL Live! 1.0 - Directory Traversal
source: https://www.securityfocus.com/bid/746/info The URL Live! free webserver from Pacific software is susceptible to the "../" directory traversal vulnerability. By using the '../' string in a URL, an attacker can gain read access to files outside the intended web file structure. Example: http...
Pacific Software URL Live! 1.0 - Directory Traversal
Pacific Software URL Live! 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/746/info The URL Live! free webserver from Pacific software is susceptible to the "../" directory traversal vulnerability. By using the '../' string in a URL, an attacker can gain read access to files...