2758 matches found
Sun Sunsolve CD Pack sscd_suncourier.pl email Parameter Arbitrary Command Execution
The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: Nessus did not try to...
CVE-2002-0436
sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...
CVE-2002-0436
The CVE-2002-0436 entry maps to the SunSolve CD package: the CGI script sscd_suncourier.pl does not validate the email parameter, enabling remote command execution via shell metacharacters. Documented by NVD/Nessus/OpenVAS references, this is a clientless, remote issue affecting Sunsolve CD CGI i...
SunSolve CD cgi scripts...
Sun never responded to this mail so I guess they don't consider the bug too be serious ... could be worth mentioning though. ----- Forwarded message from Fyodor [email protected] ----- Date: Sat, 16 Jun 2001 23:24:45 +0700 From: Fyodor [email protected] To: [email protected] Subject:...
Solaris 7.0/8 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution
source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI script included with the CD does not adequately sanitize input. Due to a design failure...
Solaris 7.08 Sunsolve CD - SSCD_SunCourier.pl CGI Script Arbitrary Command Execution
Solaris 7.08 Sunsolve CD - SSCDSunCourier.pl CGI Script Arbitrary Command Execution source: https://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI scri...
CVE-2001-0963
SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...
CVE-1999-1240
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message...
CVE-2001-0480
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...
CVE-2001-0452
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...
CVE-2001-0452
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...
CVE-2000-0191
Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...
CVE-2000-0191
The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...
Problems with: xcdroast, gatos, xkobo, xbill, iagno, ++
---------------------------------------------------------------- - A result of too much time - [email protected] anno 2000 - ---------------------------------------------------------------- xcdroast Version 0.96e ======================== Comes with Mandrake 7.0, others? I am not sure about...
Incorrect Permissions for CD-Rom Administrative Shares
Hi All. I've received tons of responses on this topic and found out why there are so many conflicting results of this problem. Our policy is to rename CD-Rom drives from the default assigned by Windows 2000 to H:, because there's less confusion when adding extra drives. The problem is this. If yo...
Axis Communications StorPoint CD - Authentication Bypass
Axis Communications StorPoint CD - Authentication Bypass source: https://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and privat...