2646 matches found
CVE-2002-1040
The CVE-2002-1040 entry identifies an unknown vulnerability in the WebSecure (DFSWeb) configuration utilities for AIX 4.x, with the potential involvement of relative pathnames. The NVD entry confirms a NETWORK attack vector with LOW complexity and no authentication required, resulting in partial ...
CVE-2002-1041
Unknown vulnerability in DCE 1 SMIT panels and 2 configuration commands, possibly related to relative pathnames...
CVE-2002-1041
Technical details for CVE-2002-1041 are not publicly provided in the supplied documents; no explicit affected products, versions, impact, or fixes are disclosed here. Monitor authoritative sources for updates.
CVE-2001-0507
CVE-2001-0507 describes a privilege-elevation flaw in IIS 5.0 where local users can gain privileges by abusing relative path resolution to system files used to run in-process Trojan horse files. OpenVAS/NVD entries corroborate an IIS remote/content-exploitation lineage around early MS01-044 era; ...
AtheOS: escaping from a chroot jail
------- AtheOS ------- AtheOS is a free desktop operating system under the GPL license. AtheOS currently run on Intel, AMD and other compatible processors and support the Intel Multi Processor architecture. AtheOS home page is : http://www.atheos.cx ------- Vulnerability ------- A chroot call is...
AtheOS 0.3.7 - Change Root Directory Escaping
/ source: https://www.securityfocus.com/bid/4051/info AtheOS is a freely available, open source operating system. It is distributed under the GPL, and maintained by the AtheOS project. It is possible to escape change rooted directories on AtheOS. Due to insufficient handling of relative pathes, a...
Обратный путь в директориях Comprehensive Web Programming API (directory traversal)
Метод GetRelativePath не проверяет относительные пути...
CVE-2000-0693
The CVE affects pgxconfig in the Raptor GFX configuration tool, where a relative path is used for a system call to the cp program. This enables local users to execute arbitrary commands by manipulating their PATH to point to a malicious cp replacement. Root cause: path-based command execution via...
RobTex Viking Server 1.0.7 - Relative Path Webroot Escaping
RobTex Viking Server 1.0.7 - Relative Path Webroot Escaping source: https://www.securityfocus.com/bid/2643/info The Viking Server is a freely available software package maintained and distributed by Robtex. The Viking Server provides multiple protocol service on Windows 95, 98, and NT systems. A...
RobTex Viking Server 1.0.7 - Relative Path Webroot Escaping
source: https://www.securityfocus.com/bid/2643/info The Viking Server is a freely available software package maintained and distributed by Robtex. The Viking Server provides multiple protocol service on Windows 95, 98, and NT systems. A problem in the software package could make it possible for...
Broker Ftp Server 5.0 Vulnerability
Vulnerability: users can break out of their root directory and list directories. Depending on the priv. you have other commands like delete maybe executed outside of the home. directory. e:crap was used as homedir. deleting files in e:crap is enabled Detail: Problem: Again relative paths. dir:...
Vulnerability in SlimServe FTPd
----- Begin Hush Signed Message from [email protected] ----- Vulnerability in SlimServe FTPd Overview SlimServe FTPd v1.0 is an ftp server available from http://www.whitsoftdev.com and http://www.download.com. A vulnerability exists which allows an attacker to break out of the ftp root using...
Vulnerability in Resin Webserver
----- Begin Hush Signed Message from [email protected] ----- Vulnerability in Resin Webserver Overview Resin 1.2.2 is a webserver available from http://www.caucho.com and http://java.tucows.com. A vulnerability exists which allows a remote user to break out of the web root using relative path...
Vulnerability in Picserver
Vulnerability in Picserver Overview Picserver is a specialized webserver available from http://www.informs.com and http://www.zdnet.com. A vulnerability exists which allows a remote user to break out of the web root using relative paths ie: '..', '...'. Details http://localhost:7000/../file outsi...
CVE-2000-1074
CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...
CVE-2000-1074
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory...
YaBB 9.1.2000 - Arbitrary File Read
source: https://www.securityfocus.com/bid/1668/info YaBB.pl, a web-based bulletin board script, stores board postings in numbered text files. The numbered file name is specified in the call to YaBB.pl in the variable num=. Before retrieving the file, YaBB will append a .txt extension to . Due to...
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style...
MS00-052: Relative Shell Path patch (269049)
The hotfix for the 'Relative Shell Path' vulnerability has not been applied. This vulnerability allows a malicious user who can write to the remote system root to cause the code of malicious user's choice to be executed by the users who will interactively log into this host. C Tenable Network...
Security Bulletin (MS00-052)
Microsoft Security Bulletin MS00-052 - -------------------------------------- Patch Available for "Relative Shell Path" Vulnerability Originally posted: July 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0 and Windowsr...