1341 matches found
CVE-2001-0224
CVE-2001-0224 affects the Muscat Empower CGI program. A remote attacker can cause disclosure of the server’s absolute pathname via an invalid request in the DB parameter. The issue is demonstrated by a misleading DB parameter in a GET request to the CGI (e.g., GET /cgi-bin/empower?DB=whatever), w...
CVE-2001-0224
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter...
CVE-2000-0876
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname...
OpenSSH 1.2 - '.scp' File Create/Overwrite
source: https://www.securityfocus.com/bid/1742/info A vulnerability exists in the 1.2.x releases of scp which, if properly exploited using a modified scp binary on the server end, can permit the remote server to spoof local pathnames and overwrite files belonging to the local user. For example,...
CVE-2000-0646
WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS STAT command while the file is being transferred...
CVE-2000-0646
WFTPD and WFTPD Pro 2.41 are vulnerable to information disclosure: a remote attacker can obtain the real file pathname by issuing a STATUS (STAT) command during a transfer, exposing filesystem paths. The provided documents do not specify an official fix or remediation, nor exploitation status bey...
CVE-2000-0646
WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS STAT command while the file is being transferred...
CVE-2000-0168
CVE-2000-0168 affects the Microsoft Windows 9x family. The vulnerability arises when a pathname contains MS-DOS device names (e.g., CON\CON, AUX, etc.), which can cause a denial of service (system freeze/reboot) when accessed via certain services. OpenVAS-derived entries describe exploitation pat...
CVE-1999-0832
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname...
CVE-1999-0832
CVE-1999-0832 concerns a buffer overflow in the Linux NFS server triggered by a long pathname, allowing an attacker to execute commands. The linked records confirm the vulnerability exists in the NFS service on Linux and describe command execution as the impact. The provided documents do not spec...
Bray Systems Linux Trustees 1.5 - Long Pathname
// source: https://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the application to hang. Other processes may also be...
Bray Systems Linux Trustees 1.5 - Long Pathname
Bray Systems Linux Trustees 1.5 - Long Pathname // source: https://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the...
CVE-2000-0176
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...
CVE-2000-0176
The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...
CVE-2000-0176
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...
CVE-2000-0066
WebSite Pro is affected by CVE-2000-0066: remote attackers can reveal the real pathname of web directories through a malformed URL request, causing information disclosure (partial confidentiality impact). The vulnerability is documented in multiple sources (NVD/CVE listings and a Nessus plugin). ...
CVE-2000-0071
Microsoft IIS 4.0 is affected by CVE-2000-0071 via an information-disclosure path in the IDA/IDQ handling. A remote attacker can request non-existent files with .ida or .idq extensions to obtain the real document-root pathname, potentially aiding further targeted attacks. The issue is evidenced i...
CVE-2000-0218
Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname...
CVE-2000-0072
Visual Casel Vcasel does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges...