455 matches found
Far manager buffer overflow
Buffer overflow on oversized directory path...
CVE-2002-0455
IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames...
Microsoft Windows NT 4.0/2000 - NTFS File Hiding
source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows operating systems NT4, 2000 and XP enforce a 256...
CVE-2001-0788
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...
Novell Groupwise arbitrary file retrieval vulnerability
FS Advisory ID: FS-101501-20-GWSE Release Date: October 15, 2001 Product: Novell GroupWise Vendor: Novell http://www.novell.com Vendor Advisory: See vendor website. Type: Arbitrary file retrieval vulnerability Severity: High Author: Mike Shema [email protected] Foundstone, Inc...
CVE-2001-0788
Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...
CVE-2001-0788
CVE-2001-0788 affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. Remote attackers can obtain the server's absolute directory path by viewing the Location header; no remediation details are provided in the supplied documents.
CVE-2001-0626
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character...
Hexyn-sa-15.txt
Hexyn / Securax Advisory 15 - G6 FTP Full Installation Path Topic: G6 FTP Full Installation Path Announced: 2001-02-17 Affects: G6 FTP Server up to version 2.0 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE INFORMATION BELOW IS 100%...
Faststream FTP++ Client 2 Beta 11 (build in server) Vulnerability
Faststram FTP built in server responds with the real path of directory instead of a virtual one.It is possible to get files outside of root.dir. e:crap was used as root directory 1. directory path 230 User anonymous logged in. ftp pwd 257 "/E:/crap/" is current directory. 2. getting files from...
E-zine (MDMA group) опубликовали список уязвимостей во многих программных продуктах
Proxy Plus - небезопасные установки по-умолчанию, NiteServer FTPd - возможна DoS-атака, ISpy Webcam - хранит пароль в открытом виде, XiRCON IRC client - переполнение буфера, Offline Explorer - чтение локальных файлов с сервера, Argosoft FTP Server - обратный путь в директориях и множественные...
CVE-2000-0122
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program...
CVE-2000-0098
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...
iMailv5.txt
0oooop / Six Toed / Security Advisory Date: 2000, 03/01 Affected Software: iMail Server 5.0 Platform: Windows NT 4.0 SP 6a Problem A malicous user can read and send emails as any other user on the system. How The issue lies in how iMail handles the creating of new email accounts, and how it store...