CVE-2002-2369

CVE-2002-2369 affects Perception LiteServe 2.0. The issue enables an attacker to read password-protected files by using a URL containing a leading "/./" sequence, implying a path-traversal flaw in the web-access interface. The provided documents do not specify affected versions beyond LiteServe 2...

CVE-2002-2369

Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL...

CVE-2002-2369: Exposure of Sensitive Information to an Unauthorized Actor

Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL...

CVE-2002-2192

CVE-2002-2192 is an XSS vulnerability affecting Perception LiteServe 2.0.1. The flaw allows remote attackers to execute arbitrary web script via (1) the Host header when DNS wildcards are supported, or (2) the query string in a "dir" request to indexed folders. Public references confirm the same ...

CVE-2002-2192

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

CVE-2002-2192: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

CVE-2002-1986

Perception LiteServe 2.0–2.0.1 is vulnerable to an information disclosure where a remote attacker can obtain the source code of CGI scripts by making an HTTP request containing a trailing dot. The description specifies the affected software and the attack pattern but does not provide root-cause d...

CVE-2002-1986: Undefined Security Weakness

Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot "."...

CVE-2005-1908

Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / slash or leading \ backslash in the URL...

CVE-2005-1908

Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / slash or leading \ backslash in the URL...

CVE-2005-1908

Perception LiteWeb is affected by CVE-2005-1908 where remote attackers can bypass file access controls by supplying an extra leading / or \ in the URL. The issue is documented across NVD, Red Hat, and CVE records; the core detail is that an improper URL handling allows path traversal-like bypass,...

CVE-2005-1908: Undefined Security Weakness

Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / slash or leading \ backslash in the URL...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2003-1144

CVE-2003-1144: Buffer overflow in the log viewing interface of Perception LiteServe (versions 1.25–2.2) can be triggered by a GET request with a long file name, allowing remote code execution. Affected software is Perception LiteServe; root cause is a buffer overflow in the log viewer handling of...

CVE-2003-1144: Undefined Security Weakness

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

CVE-2002-2192

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

CVE-2002-1986

Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot "."...

CVE-2002-2369

Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL...

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting

source: https://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS enabled. It has been reported that LiteServe fails to sanitize...