627 matches found
Adobe Acrobat Reader ActiveX information leak
It's possible to check file existance with LoadFile method...
CVE-2005-0733
The CVE-2005-0733 entry concerns PY Software Active Webcam WebServer (webcam.exe) 5.5. It enables remote attackers to determine whether a full path exists by issuing HTTP requests, with differing responses based on file existence, resulting in information disclosure. Affected component: Active We...
CVE-2005-0733
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...
CVE-2005-0536
CVE-2005-0536 originates from a directory traversal flaw in MediaWiki (1.3.x pre-1.3.11 and 1.4 beta pre-1.4 RC1). The issue allows remote attackers to delete arbitrary files or probe file existence via the image deletion parameter. Multiple connected sources corroborate the same vulnerable versi...
CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...
CVE-2004-1325
The CVE-2004-1325 entry concerns the ActiveX control used by Windows Media Player 9.0. The getItemInfoByAtom function returns 0 if a target file does not exist, or the file size if it exists, enabling remote attackers to determine whether files exist on the local system. The description focuses o...
CVE-2004-2747
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...
CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system...
ie6-file-detection.txt
Affected Software : Microsoft Internet Explorer Vulnerability : Local File Detection Tested On : MS IE 6.0 SP1, Win2K SP4, up-to-date according to windowsupdate.com Discovered by : Gregory R. Panakkal Overview ======== This security vulnerability in Internet Explorer allows remote attackers to...
Microsoft Internet Explorer sysimage: information leak
By using sysimage: URL it's possible to check local file existance...
msieLocalFile.txt
Microsoft Internet Explorer permits to examine the existence of local files Description: There is a security bug in Microsoft Internet Explorer, which allows to check up existence of local files in system directories Root C:/, WINDOWS, SYSTEM, SYSTEM32, DESKTOP, COMMAND, Internet Explorer...
Microsoft Internet Explorer information leak
It's possible to check file existance in the standard folder...
Microsoft Internet Explorer 6 - Local Resource Enumeration
Microsoft Internet Explorer 6 - Local Resource Enumeration source: https://www.securityfocus.com/bid/11621/info Microsoft Internet Explorer is reported prone to a local resource enumeration vulnerability. It is reported that the vulnerability exists because when handling 'res://' requests for loc...
Microsoft Internet Explorer 6 - Resource Detection
Microsoft Internet Explorer 6 - Resource Detection source: https://www.securityfocus.com/bid/11026/info Microsoft Internet Explorer is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is...
CVS history.c File Existence Information Disclosure
The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behavior can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. C Tenable Network...
CVS history.c File Existence Disclosure
Binary data 2155.prm...
[UNIX] Sun Management Console Directory Traversal Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2004-1927
Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...
Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration
Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration source: https://www.securityfocus.com/bid/9611/info Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system. This may be exploited via abuse of the...