205 matches found
Directory traversal
Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...
CVE-2009-2544
Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...
CVE-2009-2544
Marcelo Costa FileServer Component Directory Traversal Vulnerability (CVE-2009-2544) affects Marcelo Costa FileServer 1.0 used with Windows Live Messenger and Messenger Plus! Live. The vulnerability allows remote authenticated users to enumerate arbitrary directories and read arbitrary files thro...
CVE-2009-2544: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...
Windows Live Messenger Plus! FileServer 1.0 Directory Traversal vulnerability
No description provided by source. Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and...
Windows Live Messenger Plus! FileServer 1.0 Directory Traversal Vuln
Exploit for windows platform in category remote exploits ==================================================================== Windows Live Messenger Plus! FileServer 1.0 Directory Traversal Vuln ==================================================================== Windows Live Messenger Plus!...
Windows Live Messenger Plus! FileServer 1.0 Directory Traversal Vuln
No description provided by source. Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and...
Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal
Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is...
Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal
Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and password. I have found a vulnerabili...
Design/Logic Flaw
The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...
CVE-2009-1630
The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...
CVE-2009-1630
The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...
CVE-2009-1630
CVE-2009-1630 affects the Linux kernel nfs client: the nfs_permission function in fs/nfs/dir.c (kernel 2.6.29.3 and earlier) does not check execute (MAY_EXEC) permission bits when atomic_open is available. This allows local users to bypass permissions and execute files, as demonstrated by files o...
Debian Security Advisory DSA 1458-1 (openafs)
The remote host is missing an update to openafs announced via advisory DSA 1458-1. OpenVAS Vulnerability Test $Id: deb14581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1458-1 openafs Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1458-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 10, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1458-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 10, 2008 http://www.debian.org/security/faq -...
DSA-1458-1 openafs
Bulletin has no description...
CVE-2007-6599
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list...
CVE-2007-6599
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list...
Race condition
Race condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks, which causes the handler for the GiveUpAllCallBacks RPC to perform linked-list...