Microsoft IIS viewcode.asp Arbitrary File Access

Binary data 1708.prm...

GuildFTPd Directory Traversal Arbitrary File Access

Binary data 1839.prm...

CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval

Binary data 1219.prm...

CVE-2004-0689

KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files...

Sun Java System ASP < 4.0.3 Multiple Vulnerabilities

Binary data 4533.prm...

WebAPP < 0.9.9.2 index.cgi Directory Traversal Arbitrary File Access

Binary data 2146.prm...

Icecast Server < 1.3.10 Directory Traversal Arbitrary File Access

Binary data 2143.prm...

Nokia IPSO Voyager WebGUI readfile.tcl file Parameter Arbitrary File Access

Binary data 1558.prm...

Clearswift Mimesweeper Path Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- SySS-Advisory: Clearswift Mimesweeper Path Traversal Vulnerability - ------------------------------------------------------------------- Problem discovered: July 27th 2004 Vendor...

Basilix Webmail Attachment Crafted POST Arbitrary File Access

The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they accept a list of attachment names from the client yet do not verify that the attachments were in fa...

RiSearch show.pl Arbitrary File Access

The remote host appears to be running RiSearch, a local search engine. This version contains an information disclosure vulnerability. Passing a local file URI to 'show.pl' reveals that file's contents. A remote attacker could use this information to read arbitrary files from the system, which cou...

Tivoli Directory Server ldacgi.exe Template Parameter Traversal Arbitrary File Access

The remote host is running IBM Tivoli's Directory Server, a lightweight LDAP server with a web frontend. There is a directory traversal issue in the web frontend of this program, specifically in the 'ldacgi.exe' CGI. An attacker may exploit this flaw to read arbitrary files on the remote system...

RiSearch 0.99 RiSearch Pro 3.2.6 - show.pl Arbitrary File Access

RiSearch 0.99 RiSearch Pro 3.2.6 - show.pl Arbitrary File Access source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on us...

RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Arbitrary File Access

source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters. A remote attacker may exploit this...

EasyWeb FileManager pathtext Traversal Arbitrary File/Directory Access

The remote host is running a version of the EasyWeb FileManager module that is vulnerable to a directory traversal attack. An attacker may use this flaw to read arbitrary files on the remote server by sending malformed requests like :...

DSA-534 mailreader - directory traversal

Bulletin has no description...

CVE-2004-0698

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack...

Fastream NETFile FTPWeb Server 6.56.7 - Directory Traversal

Fastream NETFile FTPWeb Server 6.56.7 - Directory Traversal source: https://www.securityfocus.com/bid/10658/info The NetFile FTP/Web Server is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. This can allow an attacker to create, view,...

Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal

source: https://www.securityfocus.com/bid/10658/info The NetFile FTP/Web Server is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. This can allow an attacker to create, view, and delete arbitrary files outside the web root. Fastream...

imperva.crystal2.txt

Dear List, Impervatm's Applidcation Defense Center has recently discovered a vulnerability in Business Objects' Crystal Reports Web Delivery Modules. This vulnerability may lead to arbitrary file access and denial of service. Following are the advisory's details...