Netwin Surge FTP Server does not adequately validate user input thereby allowing directory traversal

Overview Surge FTP Server 2.0a contains a directory traversal vulnerability. Description Surge FTP Server 2.0a allows remote users to list files outside the FTP root directory. --- Impact Attackers may list files from directories to which access was not granted. --- Solution Upgrade to version...

Hosting Directory Traversal madness...

Hosting Controller directory traversal /../ madness Date 03/14/2002 Some hosting providers mailed me and asked me to do a bit more researches about Hosting Controller, they said their clients' sites have been deleted mysteriously, and defacement still happens quite at large even though they have...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 -...

SecurityOffice Security Advisory:// Essentia Web Server Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Essentia Web Server Directory Traversal Vulnerability Type: Directory Traversal Release Date: February 22, 2002 Product / Vendor: The Essentia Web Server provides Enhanced Web Application and Communication Services. Whether you are setting up a simple...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...

Sybex E-Trainer Directory Traversal Vulnerability

Author: ZeroBreak [email protected] Published: 02.05.02 Released: 02.08.02 Software: Sybex E-Trainer Prelude: Sybex E-Trainer's are computer based training courses. They run through a web interface using your web browser. When you launch the course, it loads it's own web server and launch's...

Обратный путь в директориях и другие ошибки MRTGCongif (directory traversal)

Обратный путь в нескольких CGI-приложениях, кроме того - несанционированный доступ к файлам, межсайтовый скриптинг...

CVE-2001-1006: Undefined Security Weakness

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application...

Oracle9i Application Server Apache PL/SQL module does not properly decode URL

Overview A vulnerability exists in the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS in which the module does not properly decode double URL encoded strings. This vulnerability could allow an intruder to read files outside the web...

blackshell2: zml.cgi remote exploit

-----BEGIN PGP SIGNED MESSAGE----- --blackshell security advisory no2-- --zml.cgi remote exploit-- vendor details & history zml.cgi for webservers by jero.cc http://www.jero.cc/zml/zml.html details of exploit this is a classic CGI bug which uses ../../../../ to read remote files. example:...

Local vulnerability in libutil derived with FreeBSD 4.4-RC (and earlier)

Hello, OpenSSH derived with FreeBSD 4.4 and earlier doesn't drop privileges before messing with login class capability database. The most problematic is: if newcommand == NULL && !quietlogin && !options.uselogin fname = logingetcapstrlc, "copyright", NULL, NULL; if fname != NULL && f = fopenfname...

McAfee ASaP VirusScan service does not adequately validate input

Overview A vulnerability exists in McAfee ASaP VirusScan that permits intruders to access files outside of the web root. Description Quoting from the McAfee ASaP VirusScan FAQ, McAfee ASaP VirusScan is "a web-based, managed and updated anti-virus service for the entire desktop environment." McAfe...

mcaffee.mycio.traversal.txt

----- Begin Hush Signed Message from [email protected] ----- -= SECURITY ADVISORY =- McAfee ASaP Virusscan - myCIO HTTP Server Directory Traversal Vulnerabilty Date: 28 June 2001 Impact: HIGH Affected: Any machine running the McAfee Agent ASaP VirusScan Software Tested on: NT Workstation 4.0,...

Apache 1.3.14 - Mac File Protection Bypass

source: https://www.securityfocus.com/bid/2852/info A vulnerability exists when Apache webserver is used with Mac OS X Client. The standard filesystem for Mac OS X is HFS+. HFS+ is case insensitive while Apache's filtering is case sensitive. The result is that Apache will filter all file requests...

mimanet source viewer 2.0 - Directory Traversal

mimanet source viewer 2.0 - Directory Traversal source: https://www.securityfocus.com/bid/2762/info MIMAnet Source Viewer is a freely available CGI script which allows users to view the source code of files located elsewhere on the server. Source Viewer accepts an argument, 'loc', which it uses a...

Security Advisory: Cisco Content Service Switch 11000 Series FTP Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco Content Service Switch 11000 Series FTP Vulnerability ============================================================================== Revision 1.0 For Public Release 2001 May 17 at 1500 UTC...

SEDUM HTTP server permits directory traversal

Overview The SEDUM web server permits intruders to access files outside the web root. Description The SEDUM Web Server permits intruders to access files outside the web root using a GET request containing ".." dot dot. This can expose files including files with sensitive information to exposure b...

RaidenFTPd 2.1 - Directory Traversal

source: https://www.securityfocus.com/bid/2655/info Raiden FTPD is susceptible to directory traversal attacks using multiple dots in submitted commands specifying file paths. If the request is properly composed, RaidenFTPD will serve files outside of the intended webroot, potentially compromising...

anaconda clipper 3.3 - Directory Traversal

anaconda clipper 3.3 - Directory Traversal source: https://www.securityfocus.com/bid/2512/info Clipper is a headline-gathering tool from Anaconda! Partners which, in certain versions, is vulnerable to directory traversal attacks. By including '/../' sequences in requested URLs, an attacker can...