Debian DSA-756-1 : squirrelmail - several vulnerabilities

Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1769 Martijn Brinkers discovered cross-site scripting vulnerabilities that allow remote attackers to inject...

Slackware 9.0 / current : GDM security update (SSA:2003-236-01)

Upgraded gdm packages are available for Slackware 9.0 and -current. These fix a security issue where a local user may use GDM to read any file on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware...

Weak SSH Tectia Server key permission

Server's private key is open for reading...

CVE-2002-1913

CVE-2002-1913 affects myPHPNuke 1.8.8 where the PHP file phptonuke.php (filnavn parameter) allows a remote attacker to read arbitrary files via a full pathname. This is a Directory Traversal issue; exploitation requires no authentication and can be triggered by supplying a full file path in filna...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

CVE-2002-1880

LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...

CVE-2005-2050

Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space...

Vulnerability: McGallery v 1.1 files reading on disk

Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: files reading on disk Consequences: Web server paths are opened Risk: High Description: Attacker can form the query in URL form ang get the access to the system files Example:...

CVE-2005-1889

Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...

CVE-2005-1889

Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...

CVE-2005-1798

CVE-2005-1798 affects ServersCheck Monitoring Software versions 5.9.0–5.10.0. The vulnerability is a directory traversal that allows a remote attacker to read arbitrary files via dot-dot sequences in an HTTP request. According to the NVD entry, the impact is partial confidentiality with no integr...

CVE-2004-1986

Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. dot dot in the startdir parameter...

CVE-2004-2051

The CVE-2004-2051 entry affects eSeSIX Thintune thin clients (Phoenix browser) running firmware 2.4.38 and earlier. The issue allows local users to read arbitrary files via a file:/// URL, as described in the CVE description. Related OpenVAS data also references multiple vulnerabilities in Thintu...

CVE-2003-1162

index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the threadid, forumid, and sid parameters...

Easy Message Board - Directory Traversal

Easy Message Board - Directory Traversal source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root...

Easy Message Board - Directory Traversal

source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example/com/cgi-bin/emsgb/easymsgb.pl?print=../../../../../../../../etc/passwd...

чтение файлов в скриптах printversion.pl и textversion.pl

Скрипты printversion.pl и textversion.pl позволяют читать произвольные файлы на сервере Exploit - http://www.xxx.com/cgi-bin/textversion/textversion.pl?conf=conf.xml&file=../../../../etc/passwd http://www.xxx.com/cgi-bin/printversion/printversion.pl?conf=conf.xml&file=../../../etc/passwd Пример -...

security flaw

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

KDE desktop environment PCX graphics format buffer overflow

Multiple kimgio image reading vulnerabilities...

yawcam 0.2.5 - Directory Traversal

yawcam 0.2.5 - Directory Traversal source: https://www.securityfocus.com/bid/13295/info Yawcam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. GET ................\windows\system.ini HTTP/1.0 GET...