Opera 7.x - Directory Traversal

Opera 7.x - Directory Traversal source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to...

Opera 7.x - Directory Traversal

source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system usin...

iweb.traversal.txt

October 22 2003 Directory Traversal Attacks on iWeb Web Server. This is an advisory I did not bother posting to Bugtraq or Full disclosure because its not a very widespread application. The following two directory traversal attacks will work on iWeb mini http server...

Bytehoard 0.7 - File Disclosure

Bytehoard 0.7 - File Disclosure source: https://www.securityfocus.com/bid/8850/info Bytehoard is prone to directory traversal attacks. This could potentially permit remote attackers to gain unauthorized access to sensitive files hosted on the system running the software...

Bytehoard 0.7 - File Disclosure

source: https://www.securityfocus.com/bid/8850/info Bytehoard is prone to directory traversal attacks. This could potentially permit remote attackers to gain unauthorized access to sensitive files hosted on the system running the software...

sap internet transaction server 4620.2.0.323011 build 46b.323011 - Directory Traversal

sap internet transaction server 4620.2.0.323011 build 46b.323011 - Directory Traversal source: https://www.securityfocus.com/bid/8516/info SAP is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of sensitive files. The problem occurs due...

IBM DB2 db2job - File Overwrite

source: https://www.securityfocus.com/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by root.db2asgrp. It has been reported that db2job writes to a number of files with root privileges. The files written to are created with 0770...

PHP-Gastebuch 1.60 - Information Disclosure

PHP-Gastebuch 1.60 - Information Disclosure source: https://www.securityfocus.com/bid/8270/info PHP-Gastebuch has been reported prone to multiple information disclosure vulnerabilities. The issue presents itself because the affected software fails to sufficiently control access to sensitive files...

PHP-Gastebuch 1.60 - Information Disclosure

source: https://www.securityfocus.com/bid/8270/info PHP-Gastebuch has been reported prone to multiple information disclosure vulnerabilities. The issue presents itself because the affected software fails to sufficiently control access to sensitive files contained in the PHP-Gastebuch installation...

WebCalendar 0.9.x - Local File Inclusion Information Disclosure

WebCalendar 0.9.x - Local File Inclusion Information Disclosure source: https://www.securityfocus.com/bid/8237/info It has been reported that an information disclosure issue exists in WebCalendar. This may allow an attacker to gain unauthorized read access to potentially sensitive information wit...

Mabry Software HTTPServerX 1.0 0.047 - File Disclosure

Mabry Software HTTPServerX 1.0 0.047 - File Disclosure source: https://www.securityfocus.com/bid/8166/info Mabry Software HTTPServer/X is prone to directory traversal attacks. This could be exploited by a remote attacker to gain access to sensitive files on a system hosting the web server...

Mabry Software HTTPServer/X 1.0 0.047 - File Disclosure

source: https://www.securityfocus.com/bid/8166/info Mabry Software HTTPServer/X is prone to directory traversal attacks. This could be exploited by a remote attacker to gain access to sensitive files on a system hosting the web server implementation...

Compaq Web-Based Management Agent - Remote File Verification

Compaq Web-Based Management Agent - Remote File Verification source: https://www.securityfocus.com/bid/8019/info Compaq Web-Based Management Agent has been reported vulnerable to a remote file verification vulnerability. This information leak could be exploited by an attacker to verify the...

Compaq Web-Based Management Agent - Remote File Verification

source: https://www.securityfocus.com/bid/8019/info Compaq Web-Based Management Agent has been reported vulnerable to a remote file verification vulnerability. This information leak could be exploited by an attacker to verify the existence of sensitive files on a vulnerable system...

SurfControl Web Filter 4.2.0.1 - File Disclosure

source: https://www.securityfocus.com/bid/7978/info A problem with Web Filter may allow attackers to obtain access to sensitive files. The vulnerability occurs due to insufficent sanitization of '.../' directory traversal sequences. http://isa-surfserver:8888/.../.../.../.../winnt/...

Methodus 3 Web Server - File Disclosure

Methodus 3 Web Server - File Disclosure source: https://www.securityfocus.com/bid/7908/info The Methodus 3 Web Server component is prone to a file disclosure vulnerability. It is possible for remote attackers to retrieve resources outside of the web root directory via directory traversal attacks...

Methodus 3 Web Server - File Disclosure

source: https://www.securityfocus.com/bid/7908/info The Methodus 3 Web Server component is prone to a file disclosure vulnerability. It is possible for remote attackers to retrieve resources outside of the web root directory via directory traversal attacks. This could potentially be exploited to...

Gnutella Root Directory Misconfiguration

The remote host is running the Gnutella servent service. It seems that the root directory of the remote host is visible through this service. Confidential files might be exported. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11716; scriptversion "1.13";...

HP-UX FTPD 1.1.214.4 - REST Memory Disclosure

HP-UX FTPD 1.1.214.4 - REST Memory Disclosure // source: https://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it i...

HP-UX FTPD 1.1.214.4 - 'REST' Memory Disclosure

// source: https://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it is possible to disclose the contents of that...