2417 matches found
CVE-2004-0578
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash // characters in a URL request to the wingate-internal directory...
Post-Nuke pnTresMailer Directory Traversal Arbitrary File Access
Binary data 2440.prm...
Brio Unix odscgi HTMLFile Parameter Traversal Arbitrary File Access
The Brio web application interface has a directory traversal in the component 'odscgi'. An attacker may exploit this flaw to read arbitrary files on the remote host by submitting a URL like : http://www.example.com/ods-cgi/odscgi?HTMLFile=../../../../../../etc/passwd %NASLMINLEVEL 70300 This scri...
PostNuke pnTresMailer codebrowserpntm.php Traversal Arbitrary File Access
The remote host is running a version of the pnTresMailer PostNuke module which is vulnerable to a directory traversal attack. An attacker may use this flaw to read arbitrary files on the remote web server, with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network...
phpMyAdmin < 2.2.1 'sql.php' Arbitrary File Access
Binary data 2418.prm...
phpMyAdmin < 2.5.6-rc1 Arbitrary File Access
Binary data 2419.prm...
PHP < 3.0 mylog.html/mlog.html Arbitrary File Access
The remote host is running PHP/FI. The remote version of this software contains a flaw in the files mylog.html/mlog.html that can allow a remote attacker to view arbitrary files on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Cherokee Web Server URI Traversal Arbitrary File Access
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Remote attack...
PHP 4.x5 - cURL open_basedir Restriction Bypass
PHP 4.x5 - cURL openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/11557/info It is reported that cURL allows malicious users to bypass 'openbasedir' restrictions in PHP scripts. This issue is due to a failure of the cURL module to properly enforce PHPs 'openbasedir'...
CVE-2004-1603
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to 1 read arbitrary files via the backup feature or 2 chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled...
[SECURITY] [DSA 600-1] New samba packages fix arbitrary file access
-------------------------------------------------------------------------- Debian Security Advisory DSA 600-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2004 http://www.debian.org/security/faq -...
DSA-600-1 samba - arbitrary file access
Bulletin has no description...
[SA12703] IBM Trading Partner Interchange Arbitrary File Access Vulnerability
TITLE: IBM Trading Partner Interchange Arbitrary File Access Vulnerability SECUNIA ADVISORY ID: SA12703 VERIFY ADVISORY: http://secunia.com/advisories/12703/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: IBM...
ERRATA: Potential Arbitrary File Access (CAN-2004-0815)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ERRATA - ------ The original announcement for the Samba vulnerability identified by CAN-2004-0815 reported that Samba versions 3.0.0 - 3.0.5 inclusive were subject the remote file access bug. Later research has confirmed that only Samba 3.0.x = 3.0.2a...
Jetty Web Server < 4.2.4 Directory Traversal Arbitrary File Access
Binary data 2351.prm...
Samba Security Announcement -- Potential Arbitrary File Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Subject: Potential Arbitrary File Access Affected Versions: Samba 2.2.x = 2.2.11 and Samba 3.0.x = 3.0.5 Summary: A remote attacker may be able to gain access to files which exist outside of the share's defined path. Such files must still be readable ...
BBS E-Market Professional index.php filename Parameter Traversal Arbitrary File Access
The remote host is running BBS E-Market Professional, a Korean e-commerce application written in PHP.\n There is a directory traversal vulnerability in the 'filename' parameter of '/bemarket/shop/index.php'. A remote attacker could exploit this to read sensitive information on the system...
myServer < 0.7.1 Directory Traversal Arbitrary File Access
Binary data 2293.prm...
PerlDesk pdesk.cgi lang Parameter Traversal Arbitrary File Access
The remote host is running PerlDesk, a web-based help desk and email management application written in perl. There is a file inclusion issue in the remote version of this software which may allow an attacker to read fragments of arbitrary files on the remote host and to execute arbirary perl...
Posible Inclusion File in Perl Desk
Posible Inclusion File in Perl Desk 0000-0002 Adv-Nkxtox Date 12/09/04 Author Nikyt0x nikyt0xathotmaildotcom Site Http://nikyt0x.webcindario.com Information PerlDesk is a feature packed web based help desk and email management application designed to streamline the operation of managing emails or...