5844 matches found
CVE-2005-1087
The CVE-2005-1087 entry concerns the AN HTTPD Server 1.42n, specifically the cmdIS.DLL plugin . It describes a CRLF injection vulnerability triggered by CRLF sequences in an HTTP request, enabling remote attackers to spoof or hide logfile entries and potentially read files via an injected type co...
CVE-2005-1087
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request...
CVE-2001-1432
The Cherokee Web Server is affected by CVE-2001-1432: a directory traversal vulnerability that allows remote attackers to read arbitrary files by appending a ../ sequence in the URL. OpenVAS notes an additional issue where the process fails to drop root privileges after binding to a port, enablin...
Exploit Labs Security Advisory 2005.2
------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...
[Full-disclosure] Samsung ADSL Modem Vulnerability
------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...
CVE-2005-0259
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file...
CVE-2004-1733
CVE-2004-1733 is a directory traversal vulnerability in MyDMS 1.4.2 and other versions that allows remote registered users to read arbitrary files via ../ sequences in the URL. From the linked NASL, it is noted as affecting
CVE-2004-1740
Music daemon musicd 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST...
phpMyAdmin 2.6 - Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/12645/info phpMyAdmin is affected by multiple local file include vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in a PHP 'include', 'require', 'require-once', or similar...
CVE-2005-0519
Summary: CVE-2005-0519 and CVE-2005-0520 affect ArGoSoft FTP Server prior to 1.4.2.8. The server allows remote attackers to read arbitrary files by abusing shortcut files (.LNK) during FTP operations using SITE UNZIP or SITE COPY, leading to a read (and potentially write) access to files on the s...
CVE-2005-0520
ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...
CVE-2004-1678
CVE-2004-1678 describes a directory traversal vulnerability in PerlDesk’s pdesk.cgi. A remote attacker can read portions of arbitrary files (and possibly trigger execution of Perl modules) by crafting lang parameters with ‘..’ sequences terminated by a NULL character (%00), potentially leaking fi...
CVE-2004-1557
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to 1 /admin or 2 ServerProperties.html...
CVE-2004-1521
The CVE-2004-1521 issue affects Eudora 6.2.0.14 where forwarding an email containing base64 or quoted-printable encoded attachments fails to warn, enabling a remote attacker to read arbitrary files via spoofed Converted headers. The underlying cause is improper handling/validation of encoded atta...
CVE-2005-0479
Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and 1 "/" slash, 2 "" backslash, or 3 hex-encoded characters in the fn parameter...
CVE-2005-0372
Summary (CVE-2005-0372) : A directory traversal vulnerability in gftp for GTK+ up to version 2.0.17 allows remote FTP servers to read arbitrary files via ".." sequences returned from LIST. The issue affects gftp and is documented under CVE-2005-0372; multiple advisories (Red Hat/CentOS/Fedora) no...
CVE-2005-0435
CVE-2005-0435 affects AWStats (awstats.pl) versions 6.3 and 6.4, where remote attackers can read server web logs by manipulating CGI parameters loadplugin and pluginmode to rawlog. The underlying issue is improper handling of these parameters in the AWStats plugin, enabling information disclosure...
CVE-2004-1450
Technical details are not publicly available in the provided connected documents (no explicit affected product/version, root cause, or exploit information). Monitor for updates from the cited sources (NVD/CVE records) for any changes.