EUVD-2001-0231

Malware in sbrugna...

EUVD-2001-0232

Malware in sbrugna...

CVE-2001-0231

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...

CVE-2001-0232

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...

CVE-2001-0232

newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters...

CVE-2001-0231

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...

CVE-2001-0232

News Desk 1.2 is affected by CVE-2001-0232 via the newsdesk.cgi script, allowing remote attackers to read arbitrary files by supplying shell metacharacters. Root cause: improper handling of shell metacharacters in the CGI. Impact documented as partial confidentiality. CVSS info from NVD indicates...

CVE-2001-0231

Summary (concrete details): CVE-2001-0231 affects News Desk 1.2, specifically the NewsDesk CGI script (newsdesk.cgi). The vulnerability arises from unsafely handling URL input passed to the open() call, allowing directory traversal via sequences like ".." in the t parameter and, per CERT notes, p...

News Desk newsdesk.cgi t Parameter Traversal Arbitrary File Access

The 'newsdesk.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10586;...