3235 matches found
CVE-2001-1266
Directory traversal vulnerability in Doug Neal's HTTPD Daemon DNHTTPD before 0.4.1 allows remote attackers to view arbitrary files via a .. dot dot attack using the dot hex code '%2E'...
CVE-2001-0368
Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...
Advisory for Freestyle Chat server
Advisory for Freestyle Chat server Freestyle Chat server is made by Faust Informatics Site: http://www.faust-net.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0124 /-|=explanation=|- Freestyle Chat server is http chat environment. It is vulnerable to a variation of...
Advisory for Jana server
Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...
Advisory for MP3Mystic
Advisory for MP3Mystic MP3Mystic is made by mp3mystic.com Site: http://www.mp3mystic.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0117 /-|=explanation=|- MP3Mystic is a webserver that lets a visitor browse your harddrive only showing MP3 files. It is vulnerable to...
CVE-2001-0054
Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...
CVE-2000-0577
The vulnerability CVE-2000-0577 affects Netscape Professional Services FTP Server 1.3.6. It allows remote attackers to read arbitrary files using a directory-traversal (“..”) attack against the FTP service. The provided documents do not include remediation steps or patched versions. If exploitati...
CVE-2001-0054
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...
CVE-2001-0123
Technical details for CVE-2001-0123 are not publicly provided in the supplied connected documents. Monitor for updates.
CVE-2000-1171
The CVE-2000-1171 issue affects CGIForum 1.0’s cgiforum.pl (thesection parameter) where insufficient input validation allows directory traversal. An attacker can craft a URL (e.g., ?thesection=../../../../etc/passwd) to access files on the web server, with the accessible scope limited by the web ...
CVE-2000-1171
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. dot dot attack in the "thesection" parameter...
CVE-2000-0577
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...
Advisory for perl webserver
Advisory for Perl Web Server Site: http://perlwebserver.sourceforge.net by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0113 /-|=explanation=|- Perl Web Server has a simple dot dot bug bug. /-|=who is vulnerable=|- Tested to be vulnerable to the hex-encoded dot dot bug...
CVE-2001-0253
CVE-2001-0253 : A directory traversal vulnerability exists in the iWeb Hyperseek 2000 hsx.cgi show parameter, allowing remote attackers to read arbitrary files and directories via a .. path. The affected component is the hsx.cgi CGI in iWeb Hyperseek 2000. The underlying issue is insufficient inp...
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...
CVE-2001-0211
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. dot dot attack on the sp.nextform parameter...
CVE-2001-0042
PHP 3.x PHP3 on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. dot dot attack containing "%5c" encoded backslash sequences...