CVE-2005-3123

CVE-2005-3123 affects GNUMP3d (before 2.9.6). Multiple connected advisories describe a directory traversal flaw where crafted URLs allow reading arbitrary files the server’s user can access, due to incomplete path sanitization. Debian/DSA-877-1 and Gentoo GLSA-200511-05 cite remote exploitation; ...

CVE-2005-3123

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

Multiple gnump3d MP3 streaming server (multiple vulnerabilities)

Crossite scriptin, directory travrsal...