SuSE 10 Security Update : curl (ZYPP Patch Number 6015)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : curl (YOU Patch Number 12356)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2009-3211

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the optionsstyledir parameter to the default URI...

CVE-2009-2659

The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a crafted URL...

CVE-2009-2600

Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. dot dot in the topic parameter...

openSUSE Security Update : curl (curl-530)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update curl-530. The text description of...

openSUSE Security Update : curl (curl-530)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update curl-530. The text description of...

CVE-2009-2325

CVE-2009-2325 affects Clicknet CMS 2.1, via a directory traversal in index.php: an attacker can read arbitrary files by supplying .. in the side parameter. The NVD entry confirms the vulnerability with a CVSS v2 base score of 5.0 (Medium) and network access with no authentication. Several connect...

Apache Tomcat RequestDispatcher Directory Traversal Arbitrary File Access

According to its self-reported version number, the remote host is running a vulnerable version of Apache Tomcat. Due to a bug in a RequestDispatcher API, target paths are normalized before the query string is removed, which could result in directory traversal attacks. This allows a remote attacke...

httpdx <= 0.8 FTP Server Delete/Get/Create Directories/Files Exploit

No description provided by source. / Httpdx Server FTP v0.8 Remote Arbitrary Directories & files Vulnerability ------------------------------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests...

DEBIAN-CVE-2009-1962

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...

OCS Inventory NG 1.02 - Remote File Disclosure

OCS Inventory NG 1.02 - Remote File Disclosure OCS Inventory NG - Directory Traversal May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been...

FreeBSD : nap allows arbitrary file access (83119e27-5d7c-11d8-80e3-0020ed76ef5a)

According to the author : Fixed security loophole which allowed remote clients to access arbitrary files on our system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

peterConnects Web Server Traversal Arbitrary File Access Vulnerability

Exploit for windows platform in category remote exploits ====================================================================== peterConnects Web Server Traversal Arbitrary File Access Vulnerability ====================================================================== - PeterConnects Web Server...

peterConnects Web Server - Traversal Arbitrary File Access

PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects, Unknown Product, Unknown Version blind external tests not so...

PeterConnects Web Server Traversal

PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects, Unknown Product, Unknown Version blind external tests not so...

peterConnects Web Server Traversal Arbitrary File Access Vulnerability

No description provided by source. - PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects, Unknown Product, Unknown...

peterConnects Web Server - Traversal Arbitrary File Access

peterConnects Web Server - Traversal Arbitrary File Access - PeterConnects Web Server Traversal Arbitrary File Access - Description PeterConnects products use a web server that is vulnerable to classic directory traversal hello 1987 that allows for arbitrary file access. - Product PeterConnects,...

Gentoo Security Advisory GLSA 200903-21 (curl)

The remote host is missing updates announced in advisory GLSA 200903-21. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200903-21 (curl)

The remote host is missing updates announced in advisory GLSA 200903-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...