extent technologies rbs isp 2.5 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 80...

Extent RBS ISP

The 'Extent RBS ISP 2.5' software is installed. This software has a well known security flaw that lets anyone read arbitrary files with the privileges of the http daemon root or nobody. OpenVAS Vulnerability Test $Id: rbs.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Extent RBS ISP Authors...

Extent RBS ISP

The SPDX-FileCopyrightText: 2000 Zorgon Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10521"; scriptversion"2025-04-11T05:40:28+0000";...

CVE-2000-1036

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. dot dot attack on the Image parameter...

CVE-2000-1036

The CVE-2000-1036 issue affects Extent RBS ISP web server. A directory traversal flaw exists in the Image parameter of the Newuser CGI, allowing an unauthenticated attacker to read arbitrary files with the web server’s privileges by crafting a .. (dot dot) path. OpenVAS/Nessus entries corroborate...

CVE-2000-1036

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. dot dot attack on the Image parameter...

Extent RBS Web Server Image Parameter Traversal Arbitrary File Access

The version of Extent RBS ISP installed on the remote host fails to sanitize input to the 'Image' parameter of the 'Newuser' script. An unauthenticated, remote attacker can leverage this to read arbitrary files on the affected host with the privileges of the web server. %NASLMINLEVEL 70300 This...

Дырка в Extent RBS

Обратный путь в директории к параметру программы Newuser позволяет получить доступ к любому системному файлу...

Extent RBS directory Transversal.

Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...

extent technologies rbs isp 2.5 - Directory Traversal

extent technologies rbs isp 2.5 - Directory Traversal source: https://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variabl...

extent technologies rbs isp 2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 8002 will enable a user to read any...