Turbo Seek Null Byte Error Discloses Files to Remote Users

No description provided by source. Some demonstration exploit URLs are provided: /cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00 /cgi-bin /tseekdir.cgi?id=799&location=/etc/passwd%00 milw0rm.com 2004-09-13...

[UNIX] WebAPP Directory Traversal and Encrypted DES Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Debian bsdmainutils 6.0.14 - Calendar Information Disclosure

Debian bsdmainutils 6.0.14 - Calendar Information Disclosure // source: https://www.securityfocus.com/bid/11077/info The calendar utility contained in the bsdmainutils package on Debian GNU/Linux systems is reported susceptible to an information disclosure vulnerability. This is due to a lack of...

Bugs fixed in Version 1.4.3

In-Reply-To: [email protected] B. Unspecified File Download Vulnerability B1. An error in the MyDMS software allows to a registered users and only to registered users to download any file, such as /etc/passwd, by inserting in a parameter a text such as...

Web-APP.Org WebAPP 0.8/0.9.x - Directory Traversal

source: https://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retrieve arbitrary, potentially sensitive files from the...

IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal

source: https://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitization of user-supplied data. This issue allows remote attackers to vi...

IBM Tivoli Directory Server 3.2.24.1 - LDACGI Directory Traversal

IBM Tivoli Directory Server 3.2.24.1 - LDACGI Directory Traversal source: https://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitizati...

CVE-2004-0613

osTicket

[Full-Disclosure] Security hole in Confixx backup script

Hi, I found a security hole in Confixx. A malicious backup request via the webinterface might be used by any user to read files located in /root which is the default installation directory of confixx. The most interesting files you can retrieve with this attack are: /root/confixx/safe/shadow.tmp...

Linksys Web Camera Software 2.10 - Next_file File Disclosure

Linksys Web Camera Software 2.10 - Nextfile File Disclosure source: https://www.securityfocus.com/bid/10476/info It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files. Linksys Web Camera...

Linksys Web Camera Software 2.10 - 'Next_file' File Disclosure

source: https://www.securityfocus.com/bid/10476/info It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files. Linksys Web Camera software version 2.10 is reportedly prone to this issue, however...

Sambar Server 6.1 Beta 2 - 'showperf.asp?title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues require an attacker to have...

xweb 1.0 - Directory Traversal

xweb 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/9937/info XWeb is reportedly prone to directory traversal attacks. Remote attackers may exploit this issue to gain access to sensitive files outside of the server root. This would occur in the context of the server, i.e.: an...

xweb 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/9937/info XWeb is reportedly prone to directory traversal attacks. Remote attackers may exploit this issue to gain access to sensitive files outside of the server root. This would occur in the context of the server, i.e.: any files the server could access...

Fools Workshop Owls Workshop 1.0 - readingsindex.php Arbitrary File Access

Fools Workshop Owls Workshop 1.0 - readingsindex.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...

Leif M. Wright Web Blog 1.1 - File Disclosure

Leif M. Wright Web Blog 1.1 - File Disclosure source: https://www.securityfocus.com/bid/9517/info Web Blog is prone to a file disclosure vulnerability. Remote attackers may gain access to files on the system hosting the server that reside outside of the server root by submitting a malicious reque...

Lotus Notes Domino 6.0.2 (linux) faulty default permissions

Lotus Notes Domino 6.0.2 linux for the installation it is recommended to add a new user like "notes". after this you should log in as root install the services. well, after i have done this i have noticed the following. there are faulty default permissions for the important configuration file...

Half Life dedicated server information leak

Dear [email protected], Probably is known, but is not documented: Vendor: Valve software Software: hlds, all versions including steam. Problem: Information leak, DoS Author: SYZoSND Problem: in server configuration, if allowdownload = 1, it's possible to download any file from directory o...

Opera 7.x - Directory Traversal

Opera 7.x - Directory Traversal source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to...

Opera 7.x - Directory Traversal

source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system usin...