964 matches found
QPC POPd Buffer Overflow Vulnerability
Strumpf Noir Society Advisories ! Public release ! -- -= QPC POPd Buffer Overflow Vulnerability =- Release date: Saturday, April 14, 2001 Introduction: QPC's popd is the pop3 mailserver component of the company's QVT/NET product line for MS Windows. The popd and the rest of the QVT/Net product li...
Дырка в BEA Weblogic (directory browsing)
Используя escape-символы 00, 2e, 2f, 5c можно получить содержимое каталога...
CVE-2001-0183
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection...
Дырка в Samba (symlink)
Пользователь, имеющий административный доступ к директории через Самбу может получить доступ к любой другой директори с помощью символьных линков...
Allaire JRun 2.3 - File Source Code Disclosure
Allaire JRun 2.3 - File Source Code Disclosure source: https://www.securityfocus.com/bid/1833/info Allaire JRun is a web application development suite with JSP and Java Servlets. JRun contains a vulnerability that allows a user to access documents outside of the webroot. Requesting a malformed UR...
web_store-cgi.txt
Exploit: http://example.com/cgi-bin/Webstore/webstore.cgi?page=../../../../. ./../../../etc/passwd%00.html...
CVE-2000-0639
The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server...
Дырка в SiteMinder
С помощью специально сконструированной URL можно получить доступ к закрытым документам, кроме того, можно получить исходные тексты CGI-приложений...
Дырка в htgrep
Используя абсолютный путь можно получить доступ к любому файлу...
Дырка в Brown Orifice :)
Обратный путь в директориях позволяет получение любого файла...
[ Hackerslab bug_paper ] ntop web mode vulnerabliity
================================================================================ Hackerslab bugpaper ntop web mode vulnerabliity ================================================================================ Command : /sbin/ntop -w port SYSTEM : N/A INFO : ntop - display top network users -w...
Gnapster Vulnerability Compromises User-readable Files
Gnapster Vulnerability Compromises User-readable Files This vulnerability was discovered at the Center for Education and Research in Information Assurance and Security CERIAS at Purdue University http://www.cerias.purdue.edu by: Tom Daniels [email protected] Florian Buchholz...
CVE-2000-0024
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability...
Уязвимость серверов mail.com
Слабая схема генерации маркетра доступа позволяет подменить маркер доступа получив доступ к почте и настройками другого пользователя на любых почтовых серверах использующих П/О от mail.com...
Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client
Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client // source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind...
CVE-1999-0166
NFS allows users to use a "cd .." command to access other directories besides the exported file system...
SGI IRIX 6.0.1 - colorview Read Files
SGI IRIX 6.0.1 - colorview Read Files source: https://www.securityfocus.com/bid/336/info Colorview fails to validate that the user has access to the file supplied to the -text option. As a result, users can view arbitrary files. /usr/sbin/colorview -text /var/spool/mail/admin...