112 matches found
FTP Based ZIP File Download Detection
Binary data 1195.prm...
Mozilla Firefox < 1.0rc2 Local File Detection
Binary data 1748.prm...
Netscape < 6.2.3 Local File Detection
Binary data 1749.prm...
NFS File Detection
Binary data 5071.prm...
security flaw
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...
[Full-Disclosure] Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory
Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory .oO Overview Oo. Pablo Software Solutions FTP server version 1.77 can detect if a file exists outside the FTP root directory. Discovered on 2004, January, 11th Vendor: Pablo Software Solutions...
CVE-2002-2031
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results...
CVE-2002-0594
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...
IRIX netstat vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: netstat vulnerability Number: 20020503-01-I Date: May 7, 2002 Reference: CAN-2002-0355 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that /usr/etc/netstat allows detection of whether...
RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)
Disturbing. Netscape sure must be in financial problems since they are selling out on their users security for a lousy $1000. I know for one that I personally will release any future Netscape advisories with full public disclosure and without prior Netscape notification. As a matter of fact, why...
CVE-1999-1496
CVE-1999-1496 affects Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 . Local users can infer the existence of arbitrary files by attempting to execute the target filename as a program, which yields different error messages depending on whether the file exists. This indicates a minor information-dis...
CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...