CVE-2006-5966

CVE-2006-5966 affects Panda ActiveScan 5.53.00 and earlier builds up to 5.54.01. The issue arises from two ActiveX controls: ActiveScan.1 Reinicializar allows remote reboot of the system, and PAVPZ.SOS.1 ObtenerTamano allows an attacker to determine arbitrary file existence and size. This is a re...

Lotus Notes information leak

It's possible to check user existance and download certificate of new user with TCP/1352 port protocol...

CVE-2006-5725

The CVE-2006-5725 entry affects the SSL server in AEP Smartgate 4.3b, where remote attackers can determine the existence of directories by requesting a directory URI and receiving different HTTP status codes for existing vs non-existing directories. This describes an information-disclosure flaw i...

CVE-2006-0393

OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang...

Design/Logic Flaw

OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang...

lazarus16.txt

Produce : Lazarus Guestbook Website : http://carbonize.co.uk/Lazarus/ Version : 2 3 4 Exploit : http://localhost/lazarusgb/lang/codes-english.php?show=%3C/title%3EXSS http://localhost/lazarusgb/lang/codes-english.php?show=%3C/title%3Ealertdocument.cookie; 2 the seconde probleme is in picture.php ...

CVE-2006-3360

Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter, which will display a different error message if the file exists...

PT-2006-4252 · Phpsysinfo · Phpsysinfo

Name of the Vulnerable Software and Affected Versions: phpSysInfo versions 2.5.1 through 3.2.4 Description: The issue allows remote attackers to determine the existence of arbitrary files via a .. dot dot sequence and a trailing null %00 byte in the lng parameter. This will display a different...

CVE-2006-3360

CVE-2006-3360 affects phpSysInfo, where Directory traversal in index.php (lng parameter) can reveal whether arbitrary files exist via a .. sequence plus a trailing null (%00). Affected versions are 2.5.1 through 3.2.4; the issue is exploitable remotely and can disclose file existence information ...

Path traversal

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

Directory traversal

Directory traversal vulnerability in Baby FTP Server BabyFTP 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not...

Directory traversal

Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository PEAR LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary file...

CVE-2006-0133

Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. dot dot in the argument to 1 getCommand.new aka getCommand and 2 getShell, a different vulnerability than CVE-2005-4273...

Directory traversal

Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. dot dot in the argument to 1 getCommand.new aka getCommand and 2 getShell, a different vulnerability than CVE-2005-4273...

CVE-2006-0133

Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. dot dot in the argument to 1 getCommand.new aka getCommand and 2 getShell, a different vulnerability than CVE-2005-4273...

CVE-2006-0133

CVE-2006-0133 covers multiple directory-traversal flaws in IBM AIX 5.3 ML03 that allow local users to determine file existence and read partial contents via ".." in the arguments to getCommand.new (getCommand) and getShell. The related CVEs and records confirm the affected platform is IBM AIX 5.3...

[xfocus-SD-060101]AIX getCommand&getShell two vulnerabilities

Title:xfocus-SD-060101AIX getCommand&getShell two vulnerabilities Affected version : aix5.3 ml03,Other versions not test, should also be affected. Vendor: http://www.ibm.com/ Where: Local XFOCUS http://www.xfocus.org had already discovered some vulnerabilities in getCommand&getShell. After apply...

IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration

source: https://www.securityfocus.com/bid/16102/info IBM AIX is prone to a local vulnerability in getShell and getCommand. This issue may let local attackers enumerate the existence of files on the computer that they wouldn't ordinarily be able to see. -bash-3.00$./getCommand.new...

CVS file existence information disclosure weakness

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behaviour can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. OpenVAS Vulnerability...

CVS file existence information disclosure weakness

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...