CVE-2004-0465

OpenConnect WebConnect (WebConnect 6.4.4, 6.5 and possibly earlier) is vulnerable to a read-only directory traversal in the jretest.html page. By sending a crafted request that abuses the WCP_USER parameter (using ..// sequences), an attacker can read INI-style files outside the webroot and view ...

CVE-2004-0465

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...

OpenConnect Webconnect read-only directory traversal vulnerability in jretest.html

Overview OpenConnect Webconnect contains a read-only directory traversal vulnerability in the file jretest.html. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1 running o...

CVE-2004-2125

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value...

CVE-2004-0465

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...

PT-2004-2618 · Unknown · Blackice Server Protection +1

Name of the Vulnerable Software and Affected Versions: BlackICE PC Protection and Server Protection affected versions not specified Description: The issue allows local users to cause a denial of service or modify configuration due to the installation of certain files with Everyone Full Control...

Lotus Notes URI command line modification

notes: URI allows to execute notes.exe with any arguments, for example to cpecify .ini file location...

MySQL Windows buffer overflow

Buffer overflow on .ini-file parsing...

CVE-2001-0983

UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges...

UltraEdit 8.2 - FTP Client Weak Password Encryption

source: https://www.securityfocus.com/bid/3234/info UltraEdit is a multi-featured commercial text editor with support for HTML, C/C++, VB, Java, Perl, XML, and C. It also includes a hex editor and a small FTP client. UltraEdit's FTP client has a feature which will remember FTP passwords for later...

Cart32 admin password vulnerability

Joint advisory issued by Cart32 and Colin Hart --------------------------------------- Date Published: 6th November 2000 --------------------------------------- Title: Cart32 admin password vulnerability --------------------------------------- Vulnerable Packages/Systems: Cart32 v3.5 build 619, i...

norton.antivirus.passwd.txt

Date: Fri, 9 Apr 1999 16:12:26 -0700 From: "Saling, Kevin" To: [email protected] Subject: NAV for MS Exchange & Internet Email Gateways After installing the following Symantec products: Norton AntiVirus for Internet Email Gateways 1.0.1.7 NAVIEG Norton AntiVirus for MS Exchange 1.5...