Seagull 0.6.3 - 'files' Remote File Disclosure

fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: optimizer.php; line 61 // get files and it's mod...

CVE-2003-1529

Vulnerability summary (CVE-2003-1529). The J Walk Application Server from Seagull Software Systems (versions 3.2C9 and earlier than 3.3c4) is vulnerable to an encoded directory traversal. An attacker can read arbitrary files by supplying a URL with an encoded dot-dot sequence (".%252e"), enabling...

CVE-2003-1529

Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" encoded dot dot in the URL...

CVE-2003-1529: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" encoded dot dot in the URL...

[SA16074] Seagull PHP Framework PEAR XML_RPC PHP Code Execution

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2003-1529

Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" encoded dot dot in the URL...