CVE-2002-2144

CVE-2002-2144 is a directory-traversal vulnerability in BearShare 4.0.5 and 4.0.6. The issue allows remote attackers to read files outside the web root by hex-encoding the "/" or "." characters. Connected sources confirm the affected software and the exploitation vector, but do not provide specif...

CVE-2002-2144

Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" forward slash or "." dot characters...

BearShare Detection

Binary data 2051.prm...

CVE-2002-2144

Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" forward slash or "." dot characters...

bearshare.4.0.6.txt

BearShare Directory Traversal Issue Resurfaces ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/6D0010A5PU.html SUMMARY A while back BearShare 2.2.2 was reported to have a directory traversal vulnerability in it...

[NT] BearShare Directory Traversal Issue Resurfaces

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

CVE-2001-0368

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...

CVE-2001-0368

CVE-2001-0368 affects BearShare 2.2.2 and earlier. A directory-traversal flaw lets a remote attacker read certain files via a URL containing a series of dots (variation of .. attack). The vulnerability is described across CVE records (NVD/CVE List) but the provided documents do not include a reme...

CVE-2001-0368

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...

A Serious Security Vulnerability Found in BearShare (Directory Traversal)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com SUMMARY http://www.bearshare.com/ BearShare is a Windows file sharing program from Free Peers, Inc. that lets you, your friends, and everyone in the world...