CVE-2000-0126

Sample Internet Data Query IDQ scripts in IIS 3 and 4 allow remote attackers to read files via a .. dot dot attack...

Oracle 8.1.7 - JSPJSPSQL Remote File Reading

Oracle 8.1.7 - JSPJSPSQL Remote File Reading...

CVE-1999-0881

Falcon web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0793

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet...

CVE-1999-0777

The connected Red Hat/NVD/CVE records confirm CVE-1999-0777 affects IIS FTP servers, where a remote attacker can read or delete files on the server despite having no access permissions. The vulnerability stems from a permission bypass in the FTP service, enabling partial confidentiality and integ...

CVE-1999-0695

Technical details are not publicly available in the provided documents for CVE-1999-0695; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-1999-0793

Technical details about CVE-1999-0793 are not publicly provided in the supplied documents; affected software/version, root cause, and remediation are not specified. Monitor Red Hat/NVD entries for updates.

CVE-1999-0883

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine...

CVE-1999-0887

FTGate web interface server allows remote attackers to read files via a .. dot dot attack...

CVE-1999-0771

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. dot dot attack...

CVE-1999-0933

TeamTrack web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0934

classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters...

CVE-1999-0917

The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files...

CVE-1999-0695

The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. dot dot attack...

CVE-1999-1287

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface...

CVE-1999-1117

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter...

CVE-1999-1451

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files...

CVE-1999-1005

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...

CVE-1999-0859

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly...

ie50.xml.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...