6760 matches found
CVE-2001-0078
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...
Way-Board 2.0 - File Disclosure
Way-Board 2.0 - File Disclosure source: https://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclose...
his software auktion 1.62 - Directory Traversal
source: https://www.securityfocus.com/bid/2367/info A remote user could gain read access to known files outside of the root directory where HIS Software Auktion 1.62 resides. Requesting a specially crafted URL composed of '../' sequences along with the known filename will disclose the requested...
Linux kernel sysctl() vulnerability
Hi, OVERVIEW There exists a Linux system call sysctl which is used to query and modify runtime system settings. Unprivileged users are permitted to query the value of many of these settings. The unprivileged user passes in a buffer location and the length of this buffer. Unfortunately, by...
Linux Kernel 2.2.x - 'sysctl()' Memory Reading
/ source: https://www.securityfocus.com/bid/2364/info The Linux Kernel is the core of the Linux Operating System. It was originally written by Linus Torvalds, and is publicly maintained. A problem in the Linux kernel may allow root compromise. The sysctl call allows a privileged program to read o...
Ports Security Advisory: FreeBSD-SA-01:22.dc20ctrl
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:22 Security Advisory FreeBSD, Inc. Topic: dc20ctrl port contains a locally exploitable buffer overflow yielding gid dialer Category: ports Module: dc20ctrl Announced:...
Vulnerability in AOLserver
Vulnerability in AOLserver Overview AOLserver v3.2 is a web server available from http://www.aolserver.com. A vulnerability exists which allows a remote user user to break out of the web root using relative paths ie: '...'. Details AOLServer checks the requested virtual path for any double dots...
Vulnerabilities in BiblioWeb Server
To Ben Greenbaum: Please post this advisory instead of the last. I needed to make a minor change to the 'Vendor Status' section. Thanks. ---------- Vulnerabilities in BiblioWeb Server Overview BiblioWeb Server 2.0 is a web server available from http://www.biblioscape.com. A vulnerability exists...
Vulnerability in Free Java Web Server
Vulnerability in Free Java Web Server Overview Free Java Web Server v1.0 is a Java web server available from http://www.download.com. A vulnerability exists which allows a remote user to break out of the web root using relative paths ie: '..', '...'. Details http://localhost/../file outside web...
aolserver 3.2 Win32 - Directory Traversal
source: https://www.securityfocus.com/bid/2343/info It is possible for a remote user to gain read access to directories outside the root directory of an AOLserver. Requesting a specially crafted URL composed of '.../' sequences will disclose an arbitrary directory. http://target/.../file outside...
Debian 2.2 Su.S.E 6.36.47.0 - man -l Format String
Debian 2.2 Su.S.E 6.36.47.0 - man -l Format String source: https://www.securityfocus.com/bid/2327/info man is the manual page viewing program, available with the Linux Operating System in this implementation. It is freely distributed and openly maintained. A problem with the man command may allow...
Microsoft Windows NT 4.0 - Networking Mutex Denial of Service
// source: https://www.securityfocus.com/bid/2303/info Microsoft Windows NT 4.0 is subject to a denial of service due to the implementation of incorrect permissions in a Mutex object. A local user could gain control of the Mutex on a networked machine and deny all network communication. / /...
CVE-2000-1178
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...
CVE-2000-0972
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates...
CVE-2000-0565
SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. dot dot attack...
CVE-2000-0698
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack...
CVE-2000-0956
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions...
fastream ftp++ 2.0 - Directory Traversal
fastream ftp++ 2.0 - Directory Traversal source: https://www.securityfocus.com/bid/2267/info It is possible for a remote uesr to gain read permissions outside of the Faststream FTP++ Server directory. By requesting an 'ls' command along with the drive name, Fastream FTP++ will disclose the conten...
SSH 1.2.x - Secure-RPC Weak Encrypted Authentication
SSH 1.2.x - Secure-RPC Weak Encrypted Authentication // source: https://www.securityfocus.com/bid/2222/info SSH is a package designed to encrypt traffic between two end points using the IETF specified SSH protocol. The SSH1 package is distributed and maintained by SSH Communications Security. A...