CVE-1999-0289

The Apache web server for Win32 may provide access to restricted files when a . dot is appended to a requested URL...

PT-1999-1033 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache web server for Win32 affected versions not specified Description: The issue allows access to restricted files when a . dot is appended to a requested URL. Recommendations: At the moment, there is no information about a newer version th...

CVE-1999-0433

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

CVE-1999-0183

CVE-1999-0183 affects Linux implementations of TFTP, described as allowing traversal to read files outside the restricted directory. The OpenVAS/Nessus entries confirm a directory-traversal vulnerability enabling arbitrary file reads via TFTP server responses (e.g., tftpd misconfiguration allows ...

CVE-1999-0289

The CVE-1999-0289 entry concerns the Apache HTTP Server for Win32. Affected component: the Web server handling URLs; issue described as: the server may provide access to restricted files when a "." is appended to a requested URL. The core impact is restricted-file disclosure. Public details acros...

CVE-1999-0289

The Apache web server for Win32 may provide access to restricted files when a . dot is appended to a requested URL...

CVE-1999-0433

XFree86 startx is affected by a symlink attack allowing local users to create files in restricted directories, potentially gaining privileges or causing a denial of service. The provided documents do not specify affected versions or a fix; one PT Security entry notes no information about a newer ...

CVE-1999-0753

The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories...

sudo.info.txt

Date: Tue, 8 Jun 1999 21:23:55 +0200 From: Bencsath Boldizsar To: [email protected] Subject: unneeded information in sudo Sudo debian , v1.5.6p2-2 tells anyone if a file exists or not. It's not a very big problem, but when i set a directory not accessible to anyone but root, I want to make sur...

CVE-1999-0916

WebTrends software stores account names and passwords in a file which does not have restricted access permissions...

CVE-1999-1367

Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users...

CVE-1999-0433

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

PT-1999-1116 · Xfree86 · Xfree86

Name of the Vulnerable Software and Affected Versions: XFree86 affected versions not specified Description: The XFree86 startx command is susceptible to a symlink attack, enabling local users to create files in restricted directories. This could potentially allow them to gain privileges or cause ...

CVE-1999-0587

A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data...

PT-1999-1207 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A WWW server is not running in a restricted file system, such as through a chroot, allowing access to system-critical data. Recommendations: At the moment, there is no information about ...

CVE-1999-1204

Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...

PT-1997-1084 · Linux · Linux Tftp

Name of the Vulnerable Software and Affected Versions: Linux TFTP affected versions not specified Description: The issue allows access to files outside the restricted directory in Linux implementations of TFTP. Recommendations: At the moment, there is no information about a newer version that...

PHP PHPfi 2.0 - Directory Traversal

PHP PHPfi 2.0 - Directory Traversal source: https://www.securityfocus.com/bid/2250/info PHP/FI is an software suite designed to offer enhanced features to sites served via the World Wide Web. It is open source, freely available, and maintained by the PHP development team. A problem with the...

Skunkware 2.0 - view-source Directory Traversal

source: https://www.securityfocus.com/bid/2251/info view-source is a script included with the httpd package bundled with Skunkware 2.0. Skunkware 2.0 is a variant of the UNIX Operating System distributed by Santa Cruz Operations. A problem with the view-source script could allow access to...

Security Update for Windows Server 2003 for Itanium-based Systems (KB920685)

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...