523 matches found
CVE-2002-1054: Undefined Security Weakness
Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via ".." dot-dot backslash sequences in a LIST command...
Multiple Vendor NFS CD Command Arbitrary File/Directory Access
The remote NFS server allows users to use a 'cd ..' command to access other directories besides the NFS file system. An attacker may use this flaw to read every file on this host. C Tenable Network Security, Inc. This is the implementation of an oooold attack. include 'compat.inc' ; if descriptio...
WarFTPd dir Command Traversal Arbitrary Directory Listing
The version of WarFTPd running on this host contains a vulnerability that may allow a potential intruder to gain read access to directories and files outside of the ftp root. By sending a specially crafted 'dir' command, the server may disclose an arbitrary directory. This script was written by...
CVE-2002-1354
Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... dot dot dot in the cd/CWD command...
CVE-2002-0775
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...
CVE-2002-0775: Undefined Security Weakness
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...
CVE-2002-0466
The CVE-2002-0466 entry concerns Hosting Controller (version 1.4.1 and earlier). The connected OpenVAS entries describe vulnerable ASP pages for Hosting Controller, indicating multiple remote exploits exist that could be used to access confidential data or escalate privileges on the Web server. T...
CVE-2002-0466: Undefined Security Weakness
Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...
CVE-2001-1232: Undefined Security Weakness
GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get"...
Netscape Enterprise Web Publishing INDEX Command Arbitrary Directory Listing
The remote web server gives a file listing when it is issued the command : INDEX / HTTP/1.1 An attacker may use this flaw to discover the internal structure of your website, or to discover supposedly hidden files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2001-0450
Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to 1 delete arbitrary files via DELETE, or 2 list arbitrary directories via LIST, via a .. dot dot in the file name...
CVE-2001-0450: Undefined Security Weakness
Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to 1 delete arbitrary files via DELETE, or 2 list arbitrary directories via LIST, via a .. dot dot in the file name...
thinking arts es.one 1.0 - Directory Traversal
thinking arts es.one 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2385/info It is possible for a remote user to gain read access to directories and files outside the root directory of ES.One. Requesting a specially crafted URL by way of 'store.cgi', composed of '/../'...
aolserver 3.2 Win32 - Directory Traversal
source: https://www.securityfocus.com/bid/2343/info It is possible for a remote user to gain read access to directories outside the root directory of an AOLserver. Requesting a specially crafted URL composed of '.../' sequences will disclose an arbitrary directory. http://target/.../file outside...
CVE-2000-0835: Undefined Security Weakness
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter...
Microsoft IIS WebDAV SEARCH Method Arbitrary Directory Forced Listing
It is possible to retrieve the listing of the remote directories accessible via HTTP, rather than their index.html, using the Index Server service which provides WebDav capabilities to this server. This problem allows an attacker to gain more knowledge about the remote host, and may make him awar...
Sambar Server ISAPI Search Utility search.dll Arbitrary Directory Listing
The 'search.dll' CGI that comes with Sambar server can be used to obtain a listing of the remote web server directories even if they have a default page, such as index.html. This allows an attacker to gain valuable information about the directory structure of the remote host and could reveal the...
CVE-1999-0782
KDE kppp is affected by CVE-1999-0782. Local users can create a directory in an arbitrary location by manipulating the HOME environment variable. The core issue is the use of HOME to determine user directories, enabling an attacker with local access to create files/directories outside their inten...