lastlines.cgi path traversal and command execution vulns

Lastlines.cgi path traversal and command execution vulnerabilities discovered by BrainRawt. I wasn't planning on submitting this to bugtraq for its not a widely used cgi but it is still available for download and some people may be using it. lastlines.cgi is a script coded by David Powell that...

Apache Httpd < 1.3.22 : split-logfile can cause arbitrary log files to be written to

A vulnerability was found in the split-logfile support program. A request with a specially crafted Host: header could allow any file with a .log extension on the system to be written to...

Дырка в analog &#40;logfile analysis program&#41;

Переполнение буфера при разборе переменных...

scx-sa-12.txt

============================================================================= Securax-SA-12 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Remote hiding from accesslog and errorlog Announced: 2000-12-28...

CVE-2000-1048

CVE-2000-1048 affects Wingate 4.1 Beta A and earlier, specifically the logfile service. A directory traversal vulnerability allows remote attackers to read arbitrary files by crafting an HTTP GET request that carries encoded characters in the URL (..). The provided sources confirm the existence o...

CVE-2000-1048: Undefined Security Weakness

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...

wgate41a.txt

================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...

Wingate 4.1 Beta A vulnerability

================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...

Дырка в WinGate &#40;logfile service&#41;

Пользователь, имеющий доступ к журналам может получить доступ к любым файлам в системе...

Flying.txt

Vulnerability: Any user can read any file in the system. title=Flying rev. 6.20 author=Helmut Hoenig system=tested on Redhat 5.2, possibly others [email protected] Grampa Elite Overview: Flying is a X-Windows program I have found installed on Redhat 5.2 that is actually a gateway for...