499 matches found
faust Informatics FreeStyle chat 4.1 sr2 - Directory Traversal
faust Informatics FreeStyle chat 4.1 sr2 - Directory Traversal source: https://www.securityfocus.com/bid/2776/info Freestyle Chat server from Faust Informatics incorporates interactive chat functionality into websites. Versions of Freestyle Chat are vulnerable to directory traversal attacks. This...
WhitSoft SlimServe ftpd 1.0/2.0 - Directory Traversal
source: https://www.securityfocus.com/bid/2452/info SlimServ FTPd is a free ftp server distributed and maintained by WhitSoft Development. SlimServe FTPd is designed to offer ftp services to the Microsoft Windows platform. A problem with the SlimSoft FTP daemon allows remote users to traverse...
HeliSec: StarOffice symlink exploit
= Helios Security and Administration = - Hi everyone, StarOffice creates a temporary directory in /tmp called soffice.tmp, with permissions 0777. Into this directory other temporary files are creates, with the format: svZZZZ.tmp, where ZZZZ in a four or five digits number. StarOffice not only...
Lotus Domino Server 5.0.x - Directory Traversal (2)
source: https://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known filename, will display the contents of...
Cat Soft Serv-U FTP Server 2.4/2.5 - FTP Directory Traversal
source: https://www.securityfocus.com/bid/2052/info FTP Serv-U is an internet FTP server from CatSoft. Authenticated users can gain access to the ftproot of the drive where Serv-U FTP has been installed. Users that have read, write, execute and list access in the home directory will have the same...
Дырка в PHPix
Обратный путь в директориях позволяет обращаться к любым файлам, например http://target.com/Album/?mode=album&album=..2F..2F..2F..2F..2F..2F..2F..2Fetc&dispsize=640&start=0...
anyportal-0.1.txt
======================================================== AnyPortalphp-0.1 Vulnerability ======================================================== Date: 08/09/2000 Author: zorgon Web: http://www.nightbird.free.fr Introduction -------------- Secure Reality Pty Ltd. has published the Security Advisor...
QSSL Voyager 2.0 1B - '.photon' Directory Information Disclosure
source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style paths, which will allow Voyager to serve pages outside of the...
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure
QSSL Voyager 2.0 1B - .photon Directory Information Disclosure source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style...
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file...
vqserver /........../
Version tested: vqserver 1.9.9 for windows The webserver vqserver follows /........../ in requests. http://host/........../autoexec.bat gives the autoexec.bat file. More serious, http://host/........../some/path/vq/server/cfg/server.cfg where /some/path/ could be anything, but normally...
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file...
The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion
The ht:Dig Group ht:Dig 3.1.13.1.23.1.33.1.43.2 .0b1 - Arbitrary File Inclusion source: https://www.securityfocus.com/bid/1026/info ht://dig is a web content search engine for Unix platforms. The software is set up to allow for file inclusion from configuration files. Any string surrounded by the...
CVE-1999-0086
AIX routed allows remote users to modify sensitive files...
CVE-2000-0069
CVE-2000-0069 concerns the recover program in Solstice Backup, where local users can restore sensitive files. Documents indicate affected status and that the vulnerability allows local access to sensitive data, but do not specify affected versions or any available fix. The PT-2000-1060 entry note...
CVE-2000-0069
The recover program in Solstice Backup allows local users to restore sensitive files...
formhandler.cgi.txt
From: Mnemonix Subject: FormHandler.cgi FormHandler.cgi available from http://www.cgi-perl.com/programs/FormHandler uses hard coded physical paths for templates etc so it's possible to get sensitive files like /etc/passwd by modifying a site's f orm and submitting it. Cheers, David Litchfield...
teamshare teamtrack 3.0 - Directory Traversal
teamshare teamtrack 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/689/info TeamTrack 3.00 has a built-in webserver which is meant to be used during the evaluation period, or until IIS or Netscape Enterprise/FastTrack is installed. This server does not filter out requested...