Directory traversal

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party information...

Mongoose Web Server Multiple Directory Traversal Vulnerabilities

The host is running Mongoose Web Server and is prone to multiple directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbmongoosewebservermultdirtraversalvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Mongoose Web Server Multiple Directory Traversal Vulnerabilities Authors: Antu Sana...

CVE-2010-4149

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party information...

CVE-2010-4148

Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-4149

CVE-2010-4149 concerns FreshWebMaster Fresh FTP prior to or around 5.37, where a directory traversal flaw allows an FTP server to cause the client to write arbitrary files by using a ..\ pattern in the filename. The root cause is insufficient sanitization of the downloaded filename, enabling trav...

DSA-2123-1 nss - cryptographic weaknesses

Bulletin has no description...

[SECURITY] Fedora 14 Update: pam_mount-2.5-1.fc14

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

Path traversal

Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ backslash as a separator of path components within the Content-disposition HTTP header...

CVE-2010-3842

Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ backslash as a separator of path components within the Content-disposition HTTP header...

CVE-2010-3842

Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ backslash as a separator of path components within the Content-disposition HTTP header...

CVE-2010-4095

Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. dot dot in a filename in a server response...

CVE-2010-4095

Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. dot dot in a filename in a server response...

CVE-2010-4048

Opera before 10.63 allows user-assisted remote web servers to cause a denial of service application crash by sending a redirect during the saving of a file...

CVE-2010-3170

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

Design/Logic Flaw

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL serve...

Design/Logic Flaw

Opera before 10.63 allows user-assisted remote web servers to cause a denial of service application crash by sending a redirect during the saving of a file...

CVE-2010-4048

Opera before 10.63 allows user-assisted remote web servers to cause a denial of service application crash by sending a redirect during the saving of a file...

Mandriva Update for libesmtp MDVSA-2010:195 (libesmtp)

Check for the Version of libesmtp OpenVAS Vulnerability Test Mandriva Update for libesmtp MDVSA-2010:195 libesmtp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for libesmtp MDVSA-2010:195 (libesmtp)

Check for the Version of libesmtp OpenVAS Vulnerability Test Mandriva Update for libesmtp MDVSA-2010:195 libesmtp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Insecure Diffie-Hellman key exchange — Mozilla

Mozilla cryptographer Nelson Bolyard reported that the SSL implementation was permitting servers to use Diffie-Hellman Ephemeral mode DHE with too short of a minimum key length. DHE keys of such lengths are trivially breakable on modern hardware so SSL servers operating in this mode were providin...