peterConnects Web Server - Traversal Arbitrary File Access

peterConnects Web Server - Traversal Arbitrary File Access - PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects,...

peterConnects Web Server Traversal Arbitrary File Access Vulnerability

Exploit for windows platform in category remote exploits ====================================================================== peterConnects Web Server Traversal Arbitrary File Access Vulnerability ====================================================================== - PeterConnects Web Server...

PeterConnects Web Server Traversal

PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects, Unknown Product, Unknown Version blind external tests not so...

peterConnects Web Server Traversal Arbitrary File Access Vulnerability

No description provided by source. - PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects, Unknown Product, Unknown...

peterConnects Web Server - Traversal Arbitrary File Access

PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects, Unknown Product, Unknown Version blind external tests not so...

Gentoo Security Advisory GLSA 200903-21 (curl)

The remote host is missing updates announced in advisory GLSA 200903-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-21 (curl)

The remote host is missing updates announced in advisory GLSA 200903-21. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Debian DSA-1738-1 : curl - arbitrary file access

David Kierznowski discovered that libcurl, a multi-protocol file transfer library, when configured to follow URL redirects automatically, does not question the new target location. As libcurl also supports file:// and scp:// URLs - depending on the setup - an untrusted server could use that to...

[SECURITY] [DSA 1738-1] New curl packages fix arbitrary file access

-------------------------------------------------------------------------- Debian Security Advisory DSA-1738-1 [email protected] http://www.debian.org/security/ Nico Golde March 11th, 2009 http://www.debian.org/security/faq -...

GLSA-200903-21 : cURL: Arbitrary file access

The remote host is affected by the vulnerability described in GLSA-200903-21 cURL: Arbitrary file access David Kierznowski reported that the redirect implementation accepts arbitrary Location values when CURLOPTFOLLOWLOCATION is enabled. Impact : A remote attacker could possibly exploit this...

OneOrZero Helpdesk <= 1.6.5.7 LFI Vulnerability - Active Check

OneOrZero Helpdesk is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Nucleus CMS < 3.40 Unspecified Traversal Arbitrary File Access

Binary data 4954.prm...

JBoss EAP unprivileged local xml file access

The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...

cURL/libcURL HTTP Location:重新定向绕过安全限制漏洞

BUGTRAQ ID: 33962 CVECAN ID: CVE-2009-0037 cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 跟随HTTP Location:的cURL会重新定向到scp:或file:// URL，因此如果用户点击了特制的重新定向URL的话（例如libcurl客户端读取RSS源），恶意的HTTP服务器就可以覆盖或泄露任意本地文件系统的内容，或执行任意命令。 Daniel Stenberg curl 5.11 - 7.19.3 厂商补丁： Daniel Stenberg...

CURL-CVE-2009-0037 Arbitrary File Access

When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...

openSUSE 10 Security Update : curl (curl-6004)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update curl-6004. The text description o...

Blue Utopia - index.php Local File Inclusion

Blue Utopia - index.php Local File Inclusion source: https://www.securityfocus.com/bid/33851/info Blue Utopia is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local...

Java WebStart unprivileged local file and network access

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors...

TrendMicro OfficeScanNT Listener Traversal Arbitrary File Access

This module tests for directory traversal vulnerability in the UpdateAgent function in the OfficeScanNT Listener TmListen.exe service in Trend Micro OfficeScan. This allows remote attackers to read arbitrary files as SYSTEM via dot dot sequences in an HTTP request. This module requires Metasploit...

CVE-2008-5642

CMS Made Simple 1.4.1 is affected by a directory traversal in admin/login.php, exploitable via a crafted cms_language cookie to read arbitrary server files. Root cause: improper validation of the cms_language cookie enabling path traversal. Exploitation details are not provided beyond the basic v...