4930 matches found
Дырки в CGI Iconboard
Обратный путь в директориях в сочетании с ошибкой NULL-byte позволяет получить содержимое любого файла...
CVE-2001-0214
The Way-board CGI (way-board.cgi) is vulnerable: an attacker can remotely read arbitrary files by supplying a filename in the db parameter terminated with a null byte. The NASL/Tenable data notes the CGI runs with the web server’s privileges (often root or nobody), enabling file disclosure. Remed...
CVE-2001-0214
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte...
CVE-2001-0214: Undefined Security Weakness
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte...
CVE-2000-1090
Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character...
CVE-2000-1090
Microsoft IIS for Far East editions 4.0 and 5.0 are affected by CVE-2000-1090, where a malformed URL employing the lead-byte of a double-byte character allows remote attackers to read source code of parsed pages. The root cause is improper handling of lead-byte in double-byte character sequences ...
CVE-2000-1090: Undefined Security Weakness
Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character...
Sample SecurID Token Emulator with Token Secret Import
Sample SecurID Token Emulator with Token Secret Import We have performed some cryptoanalysis and let's just say we do have grounds to believe that this algorithm is easily breakable. Once again, security of the cipher should be based entirely on the secrecy of the key, not the algorithm. Least...
BSD ftpd 0.3.2 - Single Byte Buffer Overflow
BSD ftpd 0.3.2 - Single Byte Buffer Overflow source: https://www.securityfocus.com/bid/2124/info The ftp daemon derived from 4.x BSD source contains a serious vulnerability that may compromise root access. There exists a one byte overflow in the replydirname function. The overflow condition is du...
DoS через cons.saver из Midnight Commander
Перенаправив вывод приложения в файл можно записать '0' в любой файл...
CVE-2000-0866
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes...
CVE-2000-0866: Undefined Security Weakness
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes...
Anaconda Advisory
Synnergy Laboratories Advisory SLA-2000-17 NAME Anaconda Foundation Directory NULL byte vulnerability AFFECTED Linux/UNIX with Anaconda Foundation Directory SYNOPSIS Synnergy Labs has found a flaw within Anaconda Foundation Directory that allows a user to successfully traverse the filesystem on a...
Дырка в Anaconda Foundation Directory
Ошибка "нулевого байта" позволяет обратиться к любому локальному файлу...
SLA-17.Anaconda.txt
Synnergy Laboratories Advisory SLA-2000-17 NAME Anaconda Foundation Directory NULL byte vulnerability AFFECTED Linux/UNIX with Anaconda Foundation Directory SYNOPSIS Synnergy Labs has found a flaw within Anaconda Foundation Directory that allow s a user to successfully traverse the filesystem on ...
Anaconda Foundation Directory apexec.pl template Parameter Traversal Arbitrary File Retrieval
The remote Anaconda Foundation Directory contains a flaw that allows anyone to read arbitrary files with root super-user privileges, by embedding a null byte in a URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...
CVE-1999-0440
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0332
UltraBoard 1.6 is affected by a path traversal in UltraBoard.pl/UltraBoard.cgi that allows remote attackers to read arbitrary files by supplying a pathname containing .. followed by a null byte. The vulnerability is described as arbitrary file access via this traversal vector; no exploitation det...