CVE-2002-2369

CVE-2002-2369 affects Perception LiteServe 2.0. The issue enables an attacker to read password-protected files by using a URL containing a leading "/./" sequence, implying a path-traversal flaw in the web-access interface. The provided documents do not specify affected versions beyond LiteServe 2...

CVE-2002-2192

CVE-2002-2192 is an XSS vulnerability affecting Perception LiteServe 2.0.1. The flaw allows remote attackers to execute arbitrary web script via (1) the Host header when DNS wildcards are supported, or (2) the query string in a "dir" request to indexed folders. Public references confirm the same ...

CVE-2002-2192

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

CVE-2002-1986

Perception LiteServe 2.0–2.0.1 is vulnerable to an information disclosure where a remote attacker can obtain the source code of CGI scripts by making an HTTP request containing a trailing dot. The description specifies the affected software and the attack pattern but does not provide root-cause d...

CVE-2005-1908

Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / slash or leading \ backslash in the URL...

CVE-2005-1908

Perception LiteWeb is affected by CVE-2005-1908 where remote attackers can bypass file access controls by supplying an extra leading / or \ in the URL. The issue is documented across NVD, Red Hat, and CVE records; the core detail is that an improper URL handling allows path traversal-like bypass,...

CVE-2005-1908

Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / slash or leading \ backslash in the URL...

CVE-2003-1144

CVE-2003-1144: Buffer overflow in the log viewing interface of Perception LiteServe (versions 1.25–2.2) can be triggered by a GET request with a long file name, allowing remote code execution. Affected software is Perception LiteServe; root cause is a buffer overflow in the log viewer handling of...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2002-2369

Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL...

CVE-2002-1986

Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot "."...

CVE-2002-2192

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting

source: https://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS enabled. It has been reported that LiteServe fails to sanitize...

CVE-2001-0795

Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as 1 upper case letters or 2 8.3 file names...

CVE-2001-0795

Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as 1 upper case letters or 2 8.3 file names...

PT-2001-1972 · Perception · Perception Liteserve

Name of the Vulnerable Software and Affected Versions: Perception LiteServe version 1.25 Description: The issue allows remote attackers to obtain the source code of CGI scripts via URLs that contain MS-DOS conventions, such as upper case letters or 8.3 file names. Recommendations: For Perception...

Получение исходного кода страницы в Perception LiteServe (source code retrieval)

Можно получить исходный текст страницы используя имена в формате 8.3...

Perception LiteServe MS-DOS filename vulnerability

Perception LiteServe http://www.cmfperception.com/liteserve.html is a Web, FTP and e-Mail server for Win. When GET requests are made to LiteServe's webserver with the name of the cgi-bin directory as a MS-DOS directory name eg. cgi-shizznitch=CGI-SH1 and cgi-bin=CGI-BIN, LiteServe will read the...

RFP2K03.txt

---------------- RFP2K03 -------------------------- rfp.labs ------------- Contemplations on dvwssr.dll and how it affects life RFP2K02 Addendum: further information ------------------------------------- rain forest puppy / [email protected] This advisory does contain new, technical information...