2507 matches found
CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
CVE-2001-0231
Summary (concrete details): CVE-2001-0231 affects News Desk 1.2, specifically the NewsDesk CGI script (newsdesk.cgi). The vulnerability arises from unsafely handling URL input passed to the open() call, allowing directory traversal via sequences like ".." in the t parameter and, per CERT notes, p...
CVE-2001-0232
newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...
CVE-2001-0232
News Desk 1.2 is affected by CVE-2001-0232 via the newsdesk.cgi script, allowing remote attackers to read arbitrary files by supplying shell metacharacters. Root cause: improper handling of shell metacharacters in the CGI. Impact documented as partial confidentiality. CVSS info from NVD indicates...
CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
News Desk newsdesk.cgi t Parameter Traversal Arbitrary File Access
The 'newsdesk.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10586;...
