778 matches found
CVE-2000-0853
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0853
YaBB Bulletin Board vulnerability (CVE-2000-0853) affects YaBB.pl: an input validation flaw in the file parameter (num) allows remote attackers to read arbitrary server files via path traversal (e.g., ../../../../../../../../etc/passwd%00) and the .txt suffix handling. This enables reading files ...
CVE-2000-0811
CVE-2000-0811 affects Auction Weaver 1.0–1.04 (Auction Weaver LITE) and stems from improper validation of directory traversal strings (..), enabling remote attackers to read arbitrary files through the username or bidfile fields. Affected products include CGI Script Center’s Auction Weaver LITE r...
CVE-2000-1101
Directory traversal vulnerability in Winsock FTPd WFTPD 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. dot dot attack...
CVE-2000-1176
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. dot dot attack in the "catsearch" form field...
DEBIAN-CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-0811
Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. dot dot attack on the username or bidfile form fields...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-0811: Undefined Security Weakness
Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. dot dot attack on the username or bidfile form fields...
CVE-2000-0902: Undefined Security Weakness
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot attack...
PT-2000-1902 · Openssh +1 · Sshd +1
Name of the Vulnerable Software and Affected Versions: sshd versions 1.2.xx Description: A directory traversal issue in the scp component of sshd allows a remote malicious scp server to overwrite arbitrary files using a .. dot dot attack. Recommendations: For sshd versions 1.2.xx, consider...
CVE-2000-1075
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. dot dot attack in the Agent, End Entity, or Administrator services...
CVE-2000-0902
CVE-2000-0902 affects PhotoAlbum (getalbum.php) prior to version 0.9.9. The vulnerability allows remote attackers to read arbitrary files via a directory traversal (..). NVD lists a CVSSv2 base score of 5.0 (Medium) with partial confidentiality impact; no exploitation details or patch information...
CVE-2000-0853
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0842
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0687
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the catdir parameter...
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...
CVE-2000-0686
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the fromfile parameter...
CVE-2000-0872
CVE-2000-0872 affects PhotoAlbum 0.9.9. The vulnerability is a path traversal in explorer.php that allows remote attackers to read arbitrary files via a .. (dot dot) sequence. This is a direct file-disclosure issue, enabling access to non-public data on the server where PhotoAlbum is hosted. The ...