DEBIAN-CVE-2002-0661

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. dot dot sequences containing \ backslash characters...

CVE-2001-1108

Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. dot dot attack in the requested URL...

CVE-2001-1266

Directory traversal vulnerability in Doug Neal's HTTPD Daemon DNHTTPD before 0.4.1 allows remote attackers to view arbitrary files via a .. dot dot attack using the dot hex code '%2E'...

CVE-2001-1295

CVE-2001-1295 is a directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the CD command. The available sources confirm the affected software and the traversal nature but do not provide exploit...

CBMS: XSS and SQL Injection holes

CBMS: XSS and SQL Injection holes PROGRAM: CBMS VENDOR: Voxel Dot Net, Inc. [email protected] HOMEPAGE: http://www.voxel.net/projects/cbms/ VULNERABLE VERSIONS: 0.7 and possibly earlier versions as well LOGIN REQUIRED: yes SEVERITY: high VERSION OF THIS ADVISORY: 1.1 DESCRIPTION: "The CBMS is a full...

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

CVE-2001-1344

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by 1 inserting a null character or 2 .. dot dot...

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip pkzipc 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec recursive option via a .. dot dot attack on the archived files...

Protected files access in LilHTTP

By using ./ and ../ it's possible to access any files...

CVE-2001-1196

CVE-2001-1196 concerns Webmin 0.91, where a directory traversal flaw in edit_action.cgi could allow privilege escalation via a .. argument. The vulnerability is documented with a high-severity score (CVSS v2: HIGH, base 10.0) and is referenced by multiple sources. A remediation available in the c...

CVE-2001-1217

CVE-2001-1217 describes a directory traversal vulnerability in the PL/SQL Apache module (mod_plsql/mod_plsql) of Oracle 9i Application Server. The issue allows remote attackers to read sensitive files outside the web server’s root by crafting a request with double URL encoded sequences (..). Affe...

CVE-2002-0144

CVE-2002-0144 is a directory traversal vulnerability in chuid 1.2 and earlier that allows remote attackers to change ownership of files outside the upload directory via a .. path traversal. Affected: chuid 1.2 and earlier. Impact: unauthorized ownership changes; remote exploitation. Exploit detai...

CVE-2001-1115

The CVE-2001-1115 issue affects SIX-webboard 2.01 and earlier where generate.cgi does not properly validate the content parameter, allowing a remote attacker to perform directory traversal and read arbitrary files on the server with the web server’s permissions. This is caused by directory traver...

CVE-2001-1115: Undefined Security Weakness

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

CVE-2001-1010

CVE-2001-1010 affects Sambar Server’s pagecount CGI script (located at /session/pagecount). The vulnerability arises because the page parameter is not validated against directory traversal (".."), enabling a remote attacker to overwrite arbitrary files on the filesystem. The root cause is lack of...

CVE-2000-0180

The CVE-2000-0180 issue affects the Sojourn search engine through the sojourn.cgi CGI, where a directory-traversal (.. ) flaw allows remote attackers to read arbitrary files. The vulnerability enables information disclosure by exploiting the CGI’s input handling, executing with the web server’s p...

CVE-2000-1101

The CVE-2000-1101 entry describes a directory traversal vulnerability in Winsock FTPd (WFTPD) versions 3.00 and 2.41 when the “Restrict to home directory” option is enabled. The flaw allows local users to escape the home directory by crafting a "/../" sequence, a variant of the dot-dot attack. Th...

CVE-2000-0180

Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0676

Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment...

CVE-2001-0593: Undefined Security Weakness

Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' dot dot attack in the template parameter...