CVE-2000-0646

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS STAT command while the file is being transferred...

CVE-2000-0168

CVE-2000-0168 affects the Microsoft Windows 9x family. The vulnerability arises when a pathname contains MS-DOS device names (e.g., CON\CON, AUX, etc.), which can cause a denial of service (system freeze/reboot) when accessed via certain services. OpenVAS-derived entries describe exploitation pat...

CVE-1999-0832

Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname...

CVE-1999-0832

CVE-1999-0832 concerns a buffer overflow in the Linux NFS server triggered by a long pathname, allowing an attacker to execute commands. The linked records confirm the vulnerability exists in the NFS service on Linux and describe command execution as the impact. The provided documents do not spec...

Bray Systems Linux Trustees 1.5 - Long Pathname

// source: https://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the application to hang. Other processes may also be...

Bray Systems Linux Trustees 1.5 - Long Pathname

Bray Systems Linux Trustees 1.5 - Long Pathname // source: https://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0176

The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0066

WebSite Pro is affected by CVE-2000-0066: remote attackers can reveal the real pathname of web directories through a malformed URL request, causing information disclosure (partial confidentiality impact). The vulnerability is documented in multiple sources (NVD/CVE listings and a Nessus plugin). ...

CVE-2000-0071

Microsoft IIS 4.0 is affected by CVE-2000-0071 via an information-disclosure path in the IDA/IDQ handling. A remote attacker can request non-existent files with .ida or .idq extensions to obtain the real document-root pathname, potentially aiding further targeted attacks. The issue is evidenced i...

CVE-2000-0218

Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname...

CVE-2000-0072

Visual Casel Vcasel does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges...

CVE-2000-0066

WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request...

PT-2000-1058 · Unknown · Website Pro

Name of the Vulnerable Software and Affected Versions: WebSite Pro affected versions not specified Description: The issue allows remote attackers to determine the real pathname of web directories via a malformed URL request. Recommendations: At the moment, there is no information about a newer...