5789 matches found
idefense.dinoweb.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 09.23.2002 Directory Traversal in Dino's WebServer DESCRIPTION A vulnerability exists in the latest version of Dinos Webserver that can allow an attacker to view and retrieve any file on the system. The Common Vulnerabiliti...
CVE-2000-1206
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using modrewrite, or modvhostalias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files...
CVE-2000-1206: Undefined Security Weakness
Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using modrewrite, or modvhostalias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files...
int.exp.txt
First off, great site ! I appreciate all the work you do. I just wanted to send in a quick and dirty perl script to retrieve any file from a server running RedHat's Interchange commerce system. The temp fix for this can be to use ipchains/iptables to block access to the port from outside the...
domino.r4.txt
Lotus Domino R4 Web Server -- File Retreival Vulnerability Digisec.org Security Advisory Systems affected: Lotus Domino R4 Versions 4.x AIX - have not tested other versions/platforms Risk: High Date: July 2, 2002 Legal Notice: This advisory is Copyright c 2002 Digisec.org This advisory may be...
CVE-2002-0226
retrievepassword.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user...
XMB Forum 1.6 - Magic Lantern Log File
XMB Forum 1.6 - Magic Lantern Log File source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable...
XMB Forum 1.6 - Magic Lantern Log File
source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable to index.php. Log information is writt...
CVE-2002-0257
Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields 1 TITLE, 2 DESCTIT, 3 DESC, 4 searchstring, 5 ALIAS, 6 EMAIL, 7 ADDRESS1, 8 ADDRESS2, 9 ADDRESS3, 10 PHONE1, 11 PHONE2, 12 PHONE3, or ...
Source code retrival in Sambar
It's possible to get source code by adding space with NULL symbol to filename...
Cleartext password access via SNMP in Nortel CVX
It's possible to retrive users list with passwords via default community public...
Abyss Webserver 1.0 Administration password file retrieval exploit
Abyss Web Server was just released April 3rd . The Web Server is vulnerable to retrieving the password file on the host's computer. An attacker can send a request to get the password file just by breaking WWWROOT using Unicode. heres a report i wrote NETCRA$H SECURITY REPORT Abyss Web Server 1.0...
vuln in wwwisis: remote command execution and get files
Name : wwwisis remote command execution and get files Software Package : wwwisis possibly affected : JavaISIS and other tools based on wwwisis Vendor Homepage : http://www.bireme.br/isis/I/wwwi.htm Vulnerable Versions: 3.45 verified, probably others Platforms : Linux verified, probably others...
Retrieving information on local files in IE (GM#003-IE)
GreyMagic Security Advisory GM003-IE ===================================== By GreyMagic Software, Israel. 27 Mar 2002. Available in HTML format at http://security.greymagic.com/adv/gm003-ie/. Topic: Retrieving information on local files in IE. Discovery date: 18 Feb 2002. Affected applications:...
MS02-009: IE VBScript Handling patch (318089)
The remote host is running a version of Internet Explorer that may allow an attacker to read local files on the remote host. To exploit this flaw, an attacker would need to lure a victim on the remote system into visiting a rogue website. C Tenable Network Security, Inc. include"compat.inc"; if...
AOL/AOL Instant Messenger Vulnerability
AOL/AOL Instant Messenger Vulnerability -------------------------------------------------------------------------------- Author: Robert Lyttle [email protected] Contributors: r0cky Release Date: 02.24.02 - 2:00 AM Disclaimer: http://www.sub-seven.com and/or Robert Lyttle is not responsible for...
Phusion-web.txt
------oOo---------------- Phusion Webserver Directory Traversal, DoS Vulnerabilities and BufferOverrun, Released exploits Codes. ------oOo---------------- Phusion Webserver for Windows 9x/NT/2000 contains remote vulnerabilities which allow users to see and retrieve any file on the server. Exploit...
Older Versions of Cisco PIX Firewall Manager permits retrieval of files
Overview A vulnerability in versions of the Cisco PIX Firewall Manager PFM in use circa September 1998 allows intruders to retrieve files from the host running PFM. Description A vulnerability in the Cisco PIx FIrewall manager allows an intruder to retrieve files from the host running PFM. In...
Remote Root Hole in FreeBSD Ports
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! MULTIPLATFORM REMOTE ROOT! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ include...
Xircom REX6000 PDA Password Retrieval
Security Advisory TITLE : XIRCOM REX6000 PDA Password Retrieval REVISION : 1 CLASS : Password Retrieval VENDOR : Xircom now Intel CREDIT : Daniel Jonsson [email protected] STATUS : PLATFORMS : VULNERABLE : Xircom REX6000 MicroPDA CREATED : 2001-11-23 LAST UPDATED : 2001-11-23 VENDOR CONTACT : No...