8456 matches found
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the envreport parameter...
IRIX 5.2/5.3/6.x - TelnetD Environment Variable Format String
// source: https://www.securityfocus.com/bid/1572/info A vulnerability exists in the telnet daemon shipped with Irix versions 6.2 through 6.5.8, and in patched versions of the telnet daemon in Irix 5.2 through 6.1, from Silicon Graphics SGI. The telnetd will blindly use data passed by the user in...
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the envreport parameter...
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure source: https://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL th...
PT-2000-1353 · Matt Wright · Matt Wright'S Formmail Cgi Script
Name of the Vulnerable Software and Affected Versions: Matt Wright's FormMail CGI script affected versions not specified Description: The issue allows remote attackers to obtain environmental variables via the env report parameter. This could potentially expose sensitive information about the...
Matt Wright FormMail 1.6/1.7/1.8 - Environmental Variables Disclosure
source: https://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL that specifies the email address to send the details to. This is...
Дырка в DBMAN
db.cgi позволяет получить атакующему некоторые переменные окружения...
Black Watch Labs Vulnerability Alert
Dear Security Professional, The following vulnerability: "Environment and Setup Variables Can Be Viewed Through DBMan db.cgi Script" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black Watch...
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...
PT-2000-1324 · Gossamer Threads · Gossamer Threads Dbman
Name of the Vulnerable Software and Affected Versions: Gossamer Threads DBMan version db.cgi Description: The issue allows remote attackers to view environmental variables and setup information. This is achieved by referencing a non-existing database in the db parameter. Recommendations: For...
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage
source: https://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. The parameters displayed include the...
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage source: https://www.securityfocus.com/bid/1178/info Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user withou...
Cart32 3.0 - 'expdate' Administrative Information Disclosure
source: https://www.securityfocus.com/bid/1358/info By appending the string "/expdate" to a request for the cart32.exe executable, http: //target/cgi-bin/cart32.exe/expdate an attacker can access an error message followed by a debugging page containing the server variables, the Cart32...
Cart32 3.0 - expdate Administrative Information Disclosure
Cart32 3.0 - expdate Administrative Information Disclosure source: https://www.securityfocus.com/bid/1358/info By appending the string "/expdate" to a request for the cart32.exe executable, http: //target/cgi-bin/cart32.exe/expdate an attacker can access an error message followed by a debugging...
CVE-1999-1587
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option...
PT-1999-1002 · Sun Microsystems · Solaris
Name of the Vulnerable Software and Affected Versions: Sun Microsystems Solaris versions 8 and 9, and certain earlier releases Description: The issue is related to insufficient protection of sensitive data in the /usr/ucb/ps component of the Solaris operating system. This allows local users to vi...
PT-1999-1427 · Washington University · Wu-Ftpd
Name of the Vulnerable Software and Affected Versions: WU-FTPD affected versions not specified Description: A buffer overflow issue in WU-FTPD and related FTP servers allows remote attackers to gain root privileges. This is achieved by exploiting macro variables in a message file. Recommendations...
CVE-1999-0073
Telnet allows a remote client to specify environment variables including LDLIBRARYPATH, allowing an attacker to bypass the normal system libraries and gain root access...
CVE-1999-0073
CVE-1999-0073 describes a vulnerability where a remote Telnet client can specify environment variables, including LD_LIBRARY_PATH, allowing an attacker to bypass normal system libraries and gain root access. The connected Red Hat, CVE, EUVD, and CVE list entries corroborate this description. The ...