CVE-2004-0059

The CVE-2004-0059 entry describes a directory traversal vulnerability in the upload capability of WWW File Share Pro 2.42 and earlier. The issue allows remote attackers to overwrite arbitrary files by exploiting dot-dot sequences in the filename portion of a Content-Disposition header. Affected s...

CVE-2004-0060

CVE-2004-0060 affects WWW File Share Pro 2.42 and earlier. The vulnerability allows a remote attacker to trigger a denial-of-service (crash) via a large POST request sent over the network. The connected documents confirm the affected product and the impact (DoS via crafted POST size), but do not ...

CVE-2004-0060

WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...

CVE-2004-0059

Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. dot dot sequences in the filename parameter of a Content-Disposition: header...

CVE-2004-0061

CVE-2004-0061 affects WWW File Share Pro 2.42 and earlier . It allows remote attackers to bypass directory access restrictions by using a URL with a trailing dot or a URI beginning with a slash or backslash. The impact described is partial disclosure/integrity/availability with a network attack v...

CVE-2004-0061

WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...

wwwfilesharepro.txt

Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: From the vendor's website: "WWW File Share Pro is a small HTTP server that can help you share files with your friends. They can download files from your computer or upload files from theirs. Simply specify a directory...

LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service

LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote...

LionMax Software WWW File Share Pro 2.4/2.6 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote attacker to cause the vulnerable server to crash or hang, affectively...

ScriptLogic $LOGS Share Remote Information Disclosure

The remote host has an accessible LOGS$ share. ScriptLogic creates this share to store the logs, but does not properly set the permissions on it. As a result, anyone can use it to read or modify, or possibly execute code. C Tenable Network Security, Inc. include"compat.inc"; if description...

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

Security Bulletin MS02-045: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830)

---------------------------------------------------------------------- Title: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service Q326830 Date: 22 August 2002 Software: Microsoft Windows NT 4.0 Workstation Microsoft Windows NT 4.0 Server Microsoft Windows NT 4.0 Server,...

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...

CVE-2001-1110

EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-1110

CVE-2001-1110 (EFTP 2.0.7.337) is documented as a remote-attack vulnerability where an attacker can obtain NETBIOS credentials by requesting information on a file in a network share, causing the server to send credentials to the share owner’s host and enabling the attacker to sniff the connection...

AW: ARCserve 6.61 Share Access Vulnerability

Hi, the problem also applys to ArcServe 2000. This securityleak was announced by CA in the Storage-Newsletter september-edition. There is a patch for ArcServe 2000 with SP2a available from http://support.ca.com/Download/patches/asitnt/QO00945.html Couldn't find anything for ArcServe 6.61IT. Does...

ARCserve 6.61 Share Access Vulnerability

I have found a vulnerability with ARCServe for NT 6.61 SP2a. I stumbled upon this while performing a vulnerability analysis. Details: The default install of ARCServe for NT creates a hidden share on Windows NT machines when it is installed. The name of this share is ARCSERVE$. The permissions of...