myServer 0.4.3 Directory Traversal Vulnerability

myServer 0.4.3 Directory Traversal Vulnerability .oO Overview Oo. myServer version 0.4.3 shows files and directories that reside outside the normal web root directory. Discovered on 2003, August, 23th Vendor: Myserver http://myserverweb.sourceforge.net/forum/portal.php MyServer is a free, powerfu...

S21SEC-016 - Vignette SSI Injection

ID: S21SEC-016-en Title: Vignette SSI Injection Date: 15/03/2003 Status: Vendor contacted and solution available Scope: SSI Execution, In some cases Remote command execution Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-016-en.txt Release: External S 2 1 S E C...

S21SEC-019 - Vignette /vgn/style internal information leak

ID: S21SEC-019-en Title: Vignette /vgn/style internal information leak Date: 15/03/2003 Status: Vendor contacted and solution available Scope: Revelation of internal variables Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-019-en.txt Release: External S 2 1 S E C...

S21SEC-017 - Vignette /vgn/legacy/save SQL access

ID: S21SEC-017-en Title: Vignette /vgn/legacy/save SQL access Date: 15/03/2003 Status: Vendor contacted and solution available Scope: Execution of SQL SELECT calls Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-017-en.txt Release: External S 2 1 S E C...

HackTrack-2003-03-001.txt

=== HackTrack - Advisory ================ Adv. ID: 2003-03-001 == Advisory Information -------------------- Name : Directory Traversal bug in QuickFront webserver Vendor Homepage : http://www.quickfront.com Platforms : Windows Vulnerability Type : Directory Traversal Vendor Contacted : 11/03/2003...

WebChat XSS

The remote host is vulnerable to a cross-site scripting attack through its web chat module : - An attacker may create a new user with a bogus email address containing JavaScript code - Then the profile of the newly created user or the 'lost password' page for this user will display the unprocesse...

Microsoft ActiveSync WideCharToMultiByte() Function NULL Dereference Remote DoS

The remote service probably ActiveSync could be crashed by sending it a malformed packet advertising a wrong content-length. An attacker may use this flaw to disable this service remotely. It is not clear at this time if this vulnerability can be used to execute arbitrary code on this host,...

Eggdrop arbitrary connection vulnerability

Hi, there is a serious security problem in the popular eggdrop IRCbot. The hole allows a regular user with enough 'power' at least power to add new bot records to use any linked instance of the bot on the botnet as an instant 'proxy'. The following session demonstrates the problem with an...

BadBlue Malformed GET Request Remote DoS

By sending an invalid GET request without any URI, it iss possible to crash the remote web server. An attacker could exploit this vulnerability to make the web server crash continually. C Tenable Network Security, Inc. untested Script audit and contributions from Carmichael Security Erik Anderson...

Directory traversal vulnerability in sendform.cgi

Summary Title: Directory traversal vulnerability in sendform.cgi Date: July 30, 2002 Author: Steve Christey [email protected] Credits: Brian Caswell [email protected] Erik Tayler [email protected] Vendor: Rod Clark Product: sendform.cgi Product URL: http://www.scn.org/bb615/scripts/sendform.html...

Jigsaw Webserver MS/DOS Device Request Remote DoS

The version of Jigsaw web server running on the remote host has a denial of service vulnerability. It was possible to exhaust all of the web server's available threads by requesting '/servlet/con' about thirty times. A remote attacker could exploit this to repeatedly freeze the web server. C...

AlienForm2 alienform.cgi Traversal Arbitrary File Manipulation

The AlienForm CGI script allows an attacker to view any file on the target computer, append arbitrary data to an existing file, and write arbitrary data to a new file. The AlienForm CGI script is installed as either af.cgi or alienform.cgi. %NASLMINLEVEL 70300 This script was written by Andrew...

Icecast utils.c fd_write Function Format String

The remote server claims to be running Icecast 1.3.7 or 1.3.8beta2. These versions are vulnerable to a format string attack that could allow an attacker to execute arbitrary commands on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10600; scriptversion...

htgrep hdr Parameter Arbitrary File access

The 'htgrep' cgi is installed. This CGI has a well known security flaw that lets anyone read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

Glimpse HTTP aglimpse Arbitrary Command Execution

The remote web server is running GlipmseHTTP. The installed version suffers from a remote command execution vulnerability in the 'aglimpse' component. Note that we could not actually check for the presence of this vulnerability, and only checked for the existence of the 'aglimpse' CGI...