192 matches found
CVE-1999-0842
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...
CVE-1999-0842
CVE-1999-0842 affects the Symantec Mail-Gear 1.0 web interface server. The issue allows remote attackers to read arbitrary files via a .. (dot dot) path traversal, due to improper validation of file paths. The provided documents do not include specific exploit details or a confirmed remediation; ...
CVE-2000-0436
MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...
CVE-1999-1005
Vulnerability (CVE-1999-1005) GroupWise Web Interface GWWEB.EXE permits remote file read via a directory-traversal style attack on the HELP parameter, enabling reading local files with .htm extensions. The OpenVAS entry corroborates that by modifying the GroupWise Web Interface HELP URL request, ...
CVE-1999-0897
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0318
Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...
CVE-2000-0052
Technical details for CVE-2000-0052 are not publicly provided in the supplied documents; only the generic description is present. Monitor for updates in connected sources for affected products, versions, impact, and remediation.
CVE-2000-0144
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...
CVE-2000-0052
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. dot dot attack...
CVE-1999-0958
Technical details about CVE-1999-0958 are not publicly provided in the connected documents. The available sources reiterate the arbitrary command execution via sudo 1.5.x. Monitor for updates.
CVE-2000-0144
CVE-2000-0144 (Axis 700 Network Scanner) involves improper access control: administrator URLs are not properly restricted, permitting a dot-dot directory traversal to bypass password protection. Affected: Axis 700 Network Scanner; Trigger: access to admin URLs via .. traversal; Impact: password b...
CVE-2000-0261
The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0282
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...
CVE-1999-0695
The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. dot dot attack...
CVE-2000-0188
EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...
CVE-2000-0180
Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0187
EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...
CVE-2000-0153
The CVE-2000-0153 entry concerns FrontPage Personal Web Server (PWS). It describes a path traversal vulnerability (dot-dot attack) that allows remote attackers to read files, resulting in partial confidentiality impact. The available connected records confirm the affected product and the basic im...