Easy File Sharing Web Server multiple bugs

DoS, unauthorized logs and config access...

easyfile12.txt

Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...

minihttp.txt

Minihttpserver 1.x Host Engine Flaws Url: http://www.minihttpserver.net + File-Sharing for NET: "File Sharing for net is a complete, secure web server that shares your business documents and files over the web: remote users only need browsers to view your files. Share, transfer files securely wit...

easyfile.txt

Advisory for Easy File Sharing web server 1.2... --- ------------------------------------------------------------------ Easy File Sharing Web Server 1.2 ------------------------------------------------------------------ -= by Drinsane [email protected] =- Product: -------- Easy File Sharing...

minihttp file-sharing for net 1.5 - Directory Traversal

source: https://www.securityfocus.com/bid/8619/info It has been reported that WebForums and File-Sharing for NET are prone to a remote directory traversal attack due to insufficient sanitization of user-supplied data. This vulnerability could allow a remote attacker to traverse outside the server...

file sharing for net 1.5 - Directory Traversal

source: https://www.securityfocus.com/bid/8513/info File Sharing for Net is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse user-supplied input for directory...

[Full-Disclosure] [sec-labs] Remote Denial of Service vulnerability in NeoModus Direct Connect 1.0 build 9

sec-labs team proudly presents: Remote DoS vulnerability in NeoModus Direct Connect 1.0 build 9 and probably newest version. by Lord YuP 13/07/2003 I. BACKGROUND Direct Connect is a windows i've found also a linux version but i don't have time to test it p2p file-sharing program, well common...

Owl browse.php Authentication Bypass

The remote host is using owl intranet engine, an open source file sharing utility written in php. There is a flaw in this application that may allow an attacker to browse files on this host without having to log in. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 13 May 2003...

Critical: Red Hat Security Advisory: samba security update

Updated Samba packages that fix a security vulnerability are now available. Samba is a suite of utilities which provides file and printer sharing services to SMB/CIFS clients. A security vulnerability has been found in versions of Samba up to and including 2.2.8. An anonymous user could exploit t...

WinMX Detection

The remote host is using WinMX, a p2p file sharing application, which may not be suitable for a business environment. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11430; scriptversion"1.17"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"WinMX Detection";...

fws160.txt

Multible vulnerabilities found in Forum Web Server v1.60 http://www.minihttpserver.net Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY WebForums Server allows you to setup a bulletin board and photo/file xchange web...

CVE-2002-1694

Microsoft Internet Information Server IIS 4.0 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running...

KDE Security Advisory: kpf Directory traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: kpf Directory traversal Original Release Date: 2002-10-08 URL: http://www.kde.org/info/security/advisory-20021008-2.txt 0. References 1. Systems affected: kpf of any KDE release between KDE 3.0.1 and KDE 3.0.3a. 2. Overview: kpf...

KDE 3.0.x - KPF Icon Option File Disclosure

source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possible for a remote attacker to access files...

KDE 3.0.x - KPF Icon Option File Disclosure

KDE 3.0.x - KPF Icon Option File Disclosure source: https://www.securityfocus.com/bid/5951/info A vulnerability has been discovered in the kpf file sharing utility. KDE is available for the Linux operating system. It has been reported that by passing a malicious file request to kpf, it is possibl...

mldonkey Detection (telnet check)

mldonkey telnet appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. C Tenable Network Security, Inc. Not...

mldonkey Detection (WWW)

The mldonkey web interface appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. %NASLMINLEVEL 70300 C...

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access

Working Resources 1.7.x BadBlue - Administrative Interface Arbitrary File Access source: https://www.securityfocus.com/bid/5276/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. BadBlue does not sufficiently...

RCS public file sharing vulnerability

Hi, This is a vulnerability Andreas and I found about eight weeks ago. This was then first reported to the vendor and CERT. CERT received it on 5/10/02 at 8:01pm. They haven't yet done anything with it as far as I can tell. - I haven't received anything from them except for the automated response...

Working Resources BadBlue 1.7.3 - cleanSearchString() Cross-Site Scripting

Working Resources BadBlue 1.7.3 - cleanSearchString Cross-Site Scripting source: https://www.securityfocus.com/bid/5179/info BadBlue is a P2P file sharing application distributed by Working Resources. It is designed for use on Microsoft Windows operating systems. BadBlue is operated through a web...