kernel: integer overflow in ext4_ext_get_blocks()

Integer overflow in the ext4extgetblocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service BUG and system crash via a write operation on the last block of a large file, followed by a sync operation...

kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files

The mextcheckarguments function in fs/ext4/moveextent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVEEXT ioctl call that specifies this file as a donor...

Extent RBS ISP

The 'Extent RBS ISP 2.5' software is installed. This software has a well known security flaw that lets anyone read arbitrary files with the privileges of the http daemon root or nobody. OpenVAS Vulnerability Test $Id: rbs.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Extent RBS ISP Authors...

Extent RBS ISP

The SPDX-FileCopyrightText: 2000 Zorgon Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10521"; scriptversion"2025-04-11T05:40:28+0000";...

CVE-2000-1036

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. dot dot attack on the Image parameter...

CVE-2000-1036

The CVE-2000-1036 issue affects Extent RBS ISP web server. A directory traversal flaw exists in the Image parameter of the Newuser CGI, allowing an unauthenticated attacker to read arbitrary files with the web server’s privileges by crafting a .. (dot dot) path. OpenVAS/Nessus entries corroborate...

CVE-2000-1036

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. dot dot attack on the Image parameter...

Extent RBS Web Server Image Parameter Traversal Arbitrary File Access

The version of Extent RBS ISP installed on the remote host fails to sanitize input to the 'Image' parameter of the 'Newuser' script. An unauthenticated, remote attacker can leverage this to read arbitrary files on the affected host with the privileges of the web server. %NASLMINLEVEL 70300 This...

Extent RBS directory Transversal.

Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...

Дырка в Extent RBS

Обратный путь в директории к параметру программы Newuser позволяет получить доступ к любому системному файлу...

extent technologies rbs isp 2.5 - Directory Traversal

extent technologies rbs isp 2.5 - Directory Traversal source: https://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variabl...

extent technologies rbs isp 2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/1704/info A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 8002 will enable a user to read any...