AnalogX "SimpleServer:WWW" dot dot bug

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...

CVE-2000-0303

Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...

CVE-2000-0436

Technical details about CVE-2000-0436 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation information are disclosed here. Monitor for updates.

CVE-2000-0174

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-2000-0660

The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0674

ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. dot dot attack...

CVE-2000-0174: Undefined Security Weakness

StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0303: Undefined Security Weakness

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-2000-0526: Undefined Security Weakness

mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0638

bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the HOSTSVC parameter...

CVE-2000-0640

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. dot dot attack, which provides different error messages depending on whether the file exists or not...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0565

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. dot dot attack...

CVE-1999-0842

CVE-1999-0842 affects the Symantec Mail-Gear 1.0 web interface server. The issue allows remote attackers to read arbitrary files via a .. (dot dot) path traversal, due to improper validation of file paths. The provided documents do not include specific exploit details or a confirmed remediation; ...

CVE-1999-0842

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...

CVE-1999-0842: Undefined Security Weakness

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...

CVE-2000-0436

MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. dot dot attack...

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...