Sun One WebServer source code disclosure

It's possible to obtains page source code via alternate NTFS streams http://server/hello.jsp::$DATA...

Crack Windows encryption protection: EFS decryption through-vulnerability warning-the black bar safety net

EFSEncrypting File System, Encrypting File Systemencryption is based on the NTFS disk art encryption technology. EFS encryption is based on Public Key Policies. Using EFS to encrypt a file or folder, the system will first generate a pseudo-random number consisting of a FEKFile Encryption Key file...

MDVA-2008:096 : ntfs-3g

In certain rare circumstances, any area of an NTFS volume, excluding the NTFS boot sector, could get corrupted. The chances for this to happen are greater when the disk is close to full utilization and when using one of the more uncommon, less than 4096 byte cluster sizes. The updated packages...

MDVA-2008:086 : drakxtools

This drakxtools and drakconf update provides fixes for the harddrake auto-configuration tool mostly for live systems and for the live system installer. It also allows mounting ntfs-3g partitions from diskdrake. Finally, it detects the USB cellular devices controlled by the hso driver. %NASLMINLEV...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:141)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash path separators or...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:140)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.9.0 and earlier, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus...

Mandriva Update for drakxtools MDVA-2008:086 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:086 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for drakxtools MDVA-2008:086 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:086 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for ntfs-3g MDVA-2008:096 (ntfs-3g)

Check for the Version of ntfs-3g OpenVAS Vulnerability Test Mandriva Update for ntfs-3g MDVA-2008:096 ntfs-3g Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Code injection

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

CVE-2008-6528 affects NTFS on TmaxSoft JEUS 5 before Fix 26. The vulnerability allows remote attackers to read the source code of scripts by appending ::$DATA to the URL, which accesses the NTFS alternate data stream. This exposure could disclose script source contents. The NVD entry lists a CVSS...

CVE-2008-6528: Improper Input Validation

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

Fedora Update for ntfs-3g FEDORA-2007-2295

Check for the Version of ntfs-3g OpenVAS Vulnerability Test Fedora Update for ntfs-3g FEDORA-2007-2295 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for ntfs-3g FEDORA-2007-2295

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability

Dear bugtraq, Thanks for your concern. I saw BID 32804. It is one incorrect information. Tmax Soft JEUS 5 Fix26 is not vulnerable. The vendor informs that users upgrade to this versionFix 26. Please change this information. Sincerely, Simon ---------- Forwarded message ---------- From: Simon Ryeo...

TmaxSoft JEUS source code leakage

It's possible to access code source by using NTFS alternative streams be adding ::$DATA to filename...

TmaxSoft JEUS Alternate Data Streams Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: TmaxSoft JEUS Alternate Data Streams Vulnerability Author: Simon Ryeobar4mi at gmail Severity: High Impact: Remote File Disclosure Vulnerable Version: JEUS 5: Fix26 on NTFS References: -...

TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability

Exploit for unknown platform in category remote exploits ================================================================== TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability ================================================================== Title: TmaxSoft JEUS Alternate Data...