Netscape/Mozilla/Galeon Local File Enumeration (deprecated)

Binary data 1311.prm...

GuildFTPd Traversal Arbitrary File Enumeration

Binary data 1840.prm...

ArGoSoft FTP Server 1.01.21.4 - Multiple Vulnerabilities

ArGoSoft FTP Server 1.01.21.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP...

ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issu...

Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration

Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration source: https://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the...

Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration

source: https://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the VBScript LoadPicture method. Exploitation of the weakness may assist ...

[NT] BEA Tuxedo Administration CGI Multiple Argument Issues

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Typo3 3.5 b5 - 'showpic.php' File Enumeration

source: https://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php' scripts. This type of information may be usefu...

Typo3 3.5 b5 - showpic.php File Enumeration

Typo3 3.5 b5 - showpic.php File Enumeration source: https://www.securityfocus.com/bid/6982/info TYPO3 is prone to a vulnerability that will allow remote attackers to enumerate whether or not files exist on the system hosting the software. This issue exists in the 'showpic.php' and 'thumbs.php'...

CVE-2002-0500

Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (1)

source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file does not exist, the onError event...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (1)

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration 1 source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the docume...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (2)

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration 2 source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the docume...

Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (2)

source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the document it is embedded in and the file does not exist, the onError event...

Security Bulletin MS00-098

====================================================================== Issue: ActiveX control in Indexing Services could allow web application to read file properties Date: 19 December 2000 Affected Software: Index Server 2.0 ships in Windows NT 4.0 Option Pack; Indexing Services 3.0 ships in...

GuildFTPd Traversal Arbitrary File Enumeration

The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. This is caused by the server responding with different error messages depending on if the file exists or not. An attacker may use this flaw to gain more...

msie.activex.filesearch.txt

Date: Wed, 9 Jun 1999 12:22:00 +0100 From: "Steve Loughran" Subject: ActiveX Security Revisited The latest Microsoft security bulletin http://www.microsoft.com/security/bulletins/ms99-018.asp includes two Internet Explorer patches. The first is a classic stack overrun -a web page can supply an ic...