EUVD-2000-0411

Malware in sbrugna...

John Donoghue Knapster 0.9/1.3.8 File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1186/info Various open source clones of the Napster software package have a vulnerability by which users may view files on a machine running a vulnerable Napster clone client. The file access is limited to files accessibl...

CVE-2000-0412

The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file...

CVE-2000-0412

CVE-2000-0412 affects the Napster-era clients (gnapster/knapster). The vulnerability allows a remote attacker to read arbitrary files on the client by specifying full pathnames, due to improper restriction to MP3 files. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network attack v...

Переполнение буфера в gnapster

Переполненеи буфера при слишком длинном GET-запросе...

gnapster dos(?)

Hello, Can anyone else verify this :- Gnapster Version : 1.3.9 & 1.3.10 Host: FreeBSD 4.0-Release, x86 first we do gdb run Starting program: /usr/local/bin/gnapster meanwhile .... yes "GET AAAAAAAAA...MANY As....." | nc localgnapsterlisteningport result.... Program received signal SIGSEGV,...

John Donoghue Knapster 0.9/1.3.8 - File Access

source: https://www.securityfocus.com/bid/1186/info Various open source clones of the Napster software package have a vulnerability by which users may view files on a machine running a vulnerable Napster clone client. The file access is limited to files accessible by the user running the client...

Gnapster Absolute Path Name Request Arbitrary File Access

An insecure Napster clone e.g. Gnapster or Knapster is running on the remote computer, which allows an intruder to read arbitrary files on this system, regardless of the shared status of the files. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10408; scriptversion...

Gnapster Vulnerability Compromises User-readable Files

Gnapster Vulnerability Compromises User-readable Files This vulnerability was discovered at the Center for Education and Research in Information Assurance and Security CERIAS at Purdue University http://www.cerias.purdue.edu by: Tom Daniels [email protected] Florian Buchholz...

FreeBSD Security Advisory: FreeBSD-SA-00:18.gnapster

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:18 Security Advisory FreeBSD, Inc. Topic: gnapster port allows remote users to view local files Category: ports Module: gnapster Announced: 2000-05-09 Credits: Fixed by...

FreeBSD-SA-00:18.gnapster.knapster

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:18 Security Advisory FreeBSD, Inc. Topic: gnapster/knapster ports allows remote users to view local files Category: ports Module: gnapster/knapster Announced: 2000-05-09...

CVE-2000-0412

The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file...