5833 matches found
Security Bulletin (MS00-081)
Microsoft Security Bulletin MS00-081 - -------------------------------------- Patch Available for New Variant of "VM File Reading" Vulnerability Originally posted: October 25, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Microsoftr virtual...
CVE-2000-0687
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the catdir parameter...
CVE-2000-0785
WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day MOTD to the specified file...
CVE-2000-0731
Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...
CVE-2000-0686
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the fromfile parameter...
HP-UX 10.2011.0 - crontab tmp File
HP-UX 10.2011.0 - crontab tmp File source: https://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an...
HP-UX 10.20/11.0 - crontab '/tmp' File
source: https://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an HP-UX system. crontab as implemented...
CVE-2000-0832
CVE-2000-0832 affects the htgrep CGI script. The issue is an information-disclosure vulnerability: remote attackers can read arbitrary files by supplying a full pathname in the hdr parameter via the web server, exposing sensitive data. The vulnerability is exploitable over network through the htg...
CVE-2000-0872
CVE-2000-0872 affects PhotoAlbum 0.9.9. The vulnerability is a path traversal in explorer.php that allows remote attackers to read arbitrary files via a .. (dot dot) sequence. This is a direct file-disclosure issue, enabling access to non-public data on the server where PhotoAlbum is hosted. The ...
CVE-2000-0832
Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter...
CVE-2000-0443
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0664
CVE-2000-0664 affects AnalogX SimpleServer:WWW 1.06 and earlier. A remote attacker can read arbitrary files via a modified dot-dot traversal using %2E URL encoding for the dots in requests to the server. The vulnerability is documented in multiple sources (NVD/CVE records, Nessus plugin) with rem...
CVE-2000-0634
The CVE-2000-0634 entry concerns the web administration interface of CommuniGate Pro 3.2.5 and earlier, where an attacker can read arbitrary files via a directory traversal (.. path) vector. The underlying issue is a dot-dot traversal vulnerability in the web admin interface that permits reading ...
CVE-2000-0782
CVE-2000-0782 affects Netwin Netauth (netauth.cgi) up to version 4.2e and earlier. The vulnerability allows remote attackers to read arbitrary files via a directory traversal (.. ) attack, exposing file contents with the web server’s privileges. The issue is triggered by improper handling of file...
CVE-2000-0630
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability...
CVE-2000-0638
bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the HOSTSVC parameter...
CVE-2000-0469
Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. dot dot attack...