EUVD-2006-3666

Malware in sbrugna...

EUVD-2005-3420

Malware in sbrugna...

Hyper Estraier directory traversal/denial of service vulnerability

Overview Hyper Estraier, a full text search system, contains a vulnerability in the process of creating index files. Impact If a remote attacker sends a specially crafted file and a user saves it in a search target directory, the attacker could register a file not to be searched in an index when...

CVE-2006-3671

Cross-site request forgery CSRF vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-3671

Cross-site request forgery CSRF vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-3671

Cross-site request forgery CSRF vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-3671

Hyper Estraier contains a CSRF vulnerability in the communicate function of estmaster.c, affecting versions before 1.3.3. This could allow remote attackers to perform unauthorized actions as other users via unknown vectors. The issue is documented across multiple advisories, with the stated remed...

CVE-2006-3671

Removed by vendor...

CVE-2005-3421

estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...

CVE-2005-3421

estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...

CVE-2005-3421

Hyper Estraier 1.0.1 (estcmd) on Windows is affected. A remote attacker can read unauthorized files by sending a crafted search request where the filename contains Unicode characters. Affected component appears to be estcmd within Hyper Estraier; the vulnerability arises during a search/indexing ...

[SA17379] Hyper Estraier Windows Unicode Filename Handling Vulnerability

TITLE: Hyper Estraier Windows Unicode Filename Handling Vulnerability SECUNIA ADVISORY ID: SA17379 VERIFY ADVISORY: http://secunia.com/advisories/17379/ CRITICAL: Less critical IMPACT: Exposure of sensitive information, DoS WHERE: From remote SOFTWARE: Hyper Estraier 1.x...

JVN#18282718 Hyper Estraier directory traversal/denial of service vulnerability

Impact If a remote attacker sends a specially crafted file and a user saves it in a search target directory, the attacker could register a file not to be searched in an index when the user creats an index, or cause a denial of service. Solution Products Affected Versions earlier than Hyper Estrai...