3667 matches found
CVE-2001-0634
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service...
CVE-2001-0632
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges...
CVE-2001-0633
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' dot dot attack in the sample script 'codebrws.asp'...
CVE-2001-0632
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX are affected by CVE-2001-0632 due to a default admin username/password created during default installation, enabling a remote attacker to gain additional privileges. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network access, no authe...
CVE-2001-0206
Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. dot dot or ... into the requested pathname of an HTTP GET request...
CVE-2001-0229
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts...
CVE-2001-0206
Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. dot dot or ... into the requested pathname of an HTTP GET request...
CVE-2001-0206
CVE-2001-0206 describes a directory traversal vulnerability in Soft Lite ServerWorx 3.00 . The flaw allows remote attackers to read arbitrary files by inserting a sequence like .. (dot dot) or ... into the requested pathname of an HTTP GET request. The NVD metrics indicate the impact on confident...
CVE-2001-0229
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts...
CVE-2001-0229
The CVE affects Chili!Soft ASP for Linux before 3.6. In inherited mode it missets group privileges, enabling local privilege escalation via malicious scripts. Impact is described as complete confidentiality, integrity, and availability losses. No explicit remediation steps are documented in the p...
Advisory: Chili!Soft ASP Multiple Vulnerabilities
Author: Stan Bubrouski [email protected] Date: February 20, 2001 Package: Chili!Soft ASP Versions affected: 3.5.2 and possibly previous versions. Severity: 1 A remote user could potentially view sensative information and take remote control of the server. 2 The installer installs a default usernam...
Vulnerability in Soft Lite ServerWorx
----- Begin Hush Signed Message from [email protected] ----- Vulnerability in Soft Lite ServerWorx Overview Soft Lite ServerWorx v3.00 is a web server available from http://www.zdnet.com and http://www.softlite.net. A vulnerability exists which allows a remote user to break out of the web roo...
CVE-2000-0632
The CVE-2000-0632 entry concerns a buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier. The vulnerability allows remote attackers to execute arbitrary commands via a long query string. Public sources (NVD/CVE records and CVE List) consistently describe this as a remot...
CVE-2000-0632
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 17, 2000 LISTSERV Web Archive Remote Overflow COVERT-2000-07 o Synopsis The L-Soft LISTSERV web archive wa,wa.exe component contains an unchecked buffer allowing remote execution of arbitrary...
CVE-2000-0632
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string...
CVE-2000-0425
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands...
CVE-2000-0425
The CVE-2000-0425 describes a buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8, enabling remote attackers to execute arbitrary commands. Affected product: LISTSERV 1.8 (Web Archives component). Root cause: a buffer overflow likely due to improper input handling in the Web Arch...
CVE-2000-0425
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands...
L-Soft Listserv 1.8 - Web Archives Buffer Overflow
// source: https://www.securityfocus.com/bid/1167/info The Web Archive component of L-Soft Listserv contains unchecked buffer code exploitable by sending specially crafted requests to the Web Archive. This weakness will allow execution of arbitrary code by remote attackers...