CVE-1999-1092

CVE-1999-1092 affects tin 1.40: it creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file. The impact is partial confidentiality breach via local access. No remediation details are provided in the supplied documents.

CVE-1999-1218

The CVE-1999-1218 entry describes a vulnerability in the finger utility of Commodore Amiga UNIX 2.1p2a and earlier, where local users can read arbitrary files. The accepted details indicate a partial confidentiality impact with local attack vector and no explicit remediation or exploitation data ...

Чтение файлов через rlmadmin (unauthorized access)

При чтении файла в директории указанной пользователем не проверяется наличие символьных линков...

CVE-2001-1000

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file...

CVE-2001-0674

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack eg. http://www.server.com/%2e%2e/%2e%2e in an HTTP URL request...

CVE-2001-1139

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...

Проблеимы с NetWare Enterprise Web Server (information leak, directory reading)

При установленном GroupWise WebAccess возможно получение листинга каталога и списка системных объектов...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-1115

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

Дырки во многих php-скриптах (directory traversal, code execution)

Можно прочитать любой файл, выполнить PHP-скрипты...

CVE-2001-0555

ScreamingMedia SITEWare has a directory-traversal vulnerability in SITEWare Editor’s Desktop (versions 2.5–3.1) and in the SWEditServlet template parameter, allowing remote attackers to read world-readable files within the SiteWare web root. The root cause is inadequate input validation that enab...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0624

QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos...

CVE-2001-0982

Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. dot dot sequences containing "%2e" strings...

CVE-2001-1045

Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in the requestidDUMMY parameter...

CVE-2001-1042

Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...

CVE-2001-0245

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability...

CVE-2001-0246

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain...

CVE-2001-0480

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...