523 matches found
Directory traversal
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...
CVE-2006-0090
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...
CVE-2006-0090
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...
CVE-2005-3296: Undefined Security Weakness
The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in...
CVE-2004-2458: Undefined Security Weakness
Open WebMail 2.30 and earlier, when usesyshomedir is disabled or createsyshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories...
CVE-2005-2358: Undefined Security Weakness
EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a directory that ends in a "." trailing dot...
Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)
A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...
CVE-2005-1229
CPIO (GNU cpio) prior to version 2.6 is affected by CVE-2005-1229, a directory-traversal flaw that lets an attacker write to arbitrary directories during extraction via a .. path in an archive. The root cause is that cpio does not sanitise extracted paths (even with --no-absolute-filenames). Cons...
CVE-2002-1354: Undefined Security Weakness
Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...
CVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...
STG Security Advisory 2005-01-20.24
STG Security Advisory: SSA-20050120-24 GForge 3.x directory traversal vulnerability. Revision 1.0 Date Published: 2005-01-20 KST Last Update: 2005-01-20 KST Disclosed by SSR Team [email protected] Summary ======== GForge is a software to help collaborative development for software...
gforge -- directory traversal vulnerability
An STG Security Advisory reports: GForge CVS module made by Dragos Moinescu and another module made by Ronald Petty have a directory traversal vulnerability. ... malicious attackers can read arbitrary directory lists...
CVE-2004-1217: Undefined Security Weakness
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...
getmail -- symlink vulnerability during maildir delivery
David Watson reports a symlink vulnerability in getmail. If run as root not the recommended mode of operation, a local user may be able to cause getmail to write files in arbitrary directories via a symlink attack on subdirectories of the maildir...
TYPSoft FTP Server LIST Command Traversal Arbitrary Directory Listing
Using 'cd ...', it is possible to move from the FTP server root directory and access any file on the remote machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: From: [email protected] To: [email protected] Date: 18 Dec 2002 00:40:44 +0200 Subject: NT TYPSoft FTP Serve...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1693.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1694.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1698.prm...
4D WebStar Arbitrary Multiple Vulnerabilities
The remote server is running a version of 4D WebStar Web Server earlier than 5.3.3. Such versions are reportedly affected by multiple issues : - An attacker may be able to obtain the listing of a directory by appending a star to the directory name. - An attacker may obtain the file php.ini by...