3350 matches found
FreeBSD sendfile() privilege escalation
Syscall allows read access to write-only files...
Debian: Security Advisory (DSA-1113)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2008-0196
Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. dot dot in 1 the page parameter to certain PHP scripts under wp-admin/ or 2 the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path...
CVE-2007-6185
Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a download action, as demonstrated by a certain PHP file containing database credentials...
Altiris Deployment Solution Directory Traversal
SUMMARY Symantecs Altiris Deployment Solution is vulnerable to an elevation of privilege attack. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No AFFECTED PRODUCTS Affected Products Product | Version | Build | Solution...
HP-UX PHSS_35579 : s700_800 11.X OV NNM7.01 PA RISC Intermediate Patch 10
s700800 11.X OV NNM7.01 PA RISC Intermediate Patch 10 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute...
VMware Workstation < 5.5.4 Build 44386 Multiple Vulnerabilities
The version of VMware Workstation installed on the remote host is earlier than 5.5.4, Build 44386. Such versions are reportedly affected by several issues, including a directory traversal issue in the application's Shared Folders feature that may allow read or write access from a guest to a host...
CVE-2007-2036
The SNMP implementation in the Cisco Wireless LAN Controller WLC before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384...
CVE-2006-6579
Microsoft Windows XP has weak permissions FILEWRITEDATA and FILEREADDATA for Everyone for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAMmachine and read access by IUSRMachine...
FireWire IOCTL integer overflow in different BSD-based Unix system
Negative IOCTL paramter value allows read access to kernel memory...
War FTP Daemon Directory Traversal
The version of WarFTPd running on this host contains a vulnerability that may allow a potential intruder to gain read access to directories and files outside of the ftp root. By sending a specially crafted 'dir' command, the server may disclose an arbitrary directory. OpenVAS Vulnerability Test...
robot.txt / robots.txt exists on the Web Server (HTTP)
Web Servers can use a file called /robots.txt to ask search engines to ignore certain files and directories. By nature this file can not be used to protect private files from public read access. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced...
Opening Group Policy Files (Q318089)
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Attacker could block application of Group Policy Affected Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft...
RaidenFTPD Unauthorized File Access flaw
The remote host is running the RaidenFTPD FTP server. The remote version of this software is vulnerable to a directory traversal flaw. A malicious user could exploit it to obtain read access to the outside of the intended ftp root. OpenVAS Vulnerability Test $Id: raidenftpdfileaccess.nasl 8023...
War FTP Daemon Directory Traversal
The version of WarFTPd running on this host contains a vulnerability that may allow a potential intruder to gain read access to directories and files outside of the ftp root. By sending a specially crafted SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted...
Opening Group Policy Files (Q318089)
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...
RaidenFTPD < 2.4 build 2241 Directory Traversal Vulnerability
RaidenFTPD is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Frox 0.7.18 - Arbitrary Configuration File Access
Frox 0.7.18 - Arbitrary Configuration File Access source: https://www.securityfocus.com/bid/14711/info Frox is prone to a vulnerability that permits read access to arbitrary files. Successful exploitation of this vulnerability will grant the attacker read access to arbitrary files on the system i...
Frox 0.7.18 - Arbitrary Configuration File Access
source: https://www.securityfocus.com/bid/14711/info Frox is prone to a vulnerability that permits read access to arbitrary files. Successful exploitation of this vulnerability will grant the attacker read access to arbitrary files on the system in the security context of the Frox process...
[SECURITYREASON.COM] PostNuke SQL Injection 0.750=>x
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke Non Critical SQL Injection and Include 0.760-RC3=x cXIb8O3.10 Author: cXIb8O3Maksymilian Arciemowicz Date: 2.4.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.760-RC3=X PostNuke is an open source, ope...