145 matches found
CVE-2004-0577
CVE-2004-0577 affects WinGate (notably 5.2.3 build 901 and 6.0 beta 2 build 942, plus 5.0.5). The vulnerability is an input-validation flaw in the wingate-internal path that allows remote, unauthenticated attackers to read arbitrary files from the root directory via a URL request to the wingate-i...
CVE-2004-0578
CVE-2004-0578 affects WinGate proxy/server software. Public records show an input-validation flaw in the wingate-internal path that allows remote attackers to read arbitrary files by using extra leading slashes in a URL (e.g., /wingate-internal/ and /wingate-internal//path). Affected versions inc...
CVE-2004-0578
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash // characters in a URL request to the wingate-internal directory...
[Full-Disclosure] iDEFENSE Security Advisory 07.01.04: WinGate Information Disclosure Vulnerability
WinGate Information Disclosure Vulnerability iDEFENSE Security Advisory 07.01.04 www.idefense.com/application/poi/display?id=113&type=vulnerabilities July 01, 2004 I. BACKGROUND WinGate is an Internet sharing and proxy application that allows for monitoring and remote administration. More...
Wingate unauthorized access
wingate-internal virtual deirectory of HTTP proxy server allows to download any file located on server...
Дырка в Wingate
Wingate позволяет подключиться к телнет-прокси через HTTP-прокси без авторизации...
Wingate 4.1.1, new year 's bug: UPDATE
Hi, I posted the mail below to bugtraq few days ago describing a somewhat weird bug into wingate 4.1.1 last release that allow to bypass all authentication/wrapper mechanism in the software. Further tests later, i think to know why. When you configure a proxy service in the properties window, u...
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...
CVE-2000-1048
CVE-2000-1048 affects Wingate 4.1 Beta A and earlier, specifically the logfile service. A directory traversal vulnerability allows remote attackers to read arbitrary files by crafting an HTTP GET request that carries encoded characters in the URL (..). The provided sources confirm the existence o...
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...
wgate41a.txt
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...
Wingate 4.1 Beta A vulnerability
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...
Дырка в WinGate (logfile service)
Пользователь, имеющий доступ к журналам может получить доступ к любым файлам в системе...
wgate401.pl
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.0.1 02/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: The Wingate engine can be disable...
CVE-1999-0657
Technical details for CVE-1999-0657 are not publicly provided in the supplied documents; there is only a generic note that WinGate is involved. Monitor for updates from official advisories for specifics on affected versions, impact, and fixes.
CVE-1999-0657
WinGate is being used...
CVE-1999-0291
CVE-1999-0291 concerns the WinGate proxy, where the proxy is installed without a password. The connected documents confirm this leads to an unauthenticated ability for remote attackers to redirect connections. The affected component is the WinGate proxy; the root cause is a passwordless/default c...
CVE-1999-0291
The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication...
CVE-1999-0290
The CVE-1999-0290 entry concerns the WinGate Telnet Proxy. Public sources indicate a denial of service can be triggered by establishing a large number of connections to localhost, leading to resource exhaustion and potential service disruption. Affected software: WinGate Telnet Proxy. The underly...