312 matches found
[Full-disclosure] Postnuke 0.750 - 0.760rc4 local file inclusion
Product : Postnuke 0.750 http://www.postnuke.com Description: Postnuke 0.750 - 0.760rc4 local file inclusion Severity: High Description =========== Postnuke is Web Content Management System written in PHP and using mysql as database backend. Detail ====== Directory traversal in function pnModFunc...
CIS WebServer directory traversal
No description provided...
CVE-2005-0372
Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. dot dot sequences in filenames returned from a LIST command...
HP-UX PHCO_30519 : HP-UX Local Elevation of Privilege Related to Directory Permissions (HPSBUX01006 SSRT2320 rev.2)
s700800 11.04 VVOS Directory patch : A potential vulnerability has been identified with HP-UX where directory permissions may be locally exploited to allow an authorized user to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in...
CVE-2004-0465
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...
CVE-2004-2526
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. dot dot in the Template parameter...
wget 1.9 - Directory Traversal
!/usr/bin/perl -W wgettrap.poc -- A POC for the wget1 directory traversal vulnerability Copyright 2004 Jan Min???? jjminar fastmail fm License: Public Domain When wget connects to us, we send it a HTTP redirect constructed so that wget wget will connect the second time, it will be attempting to...
ezshopper.txt
Product: EZshopper Versions: all URL: www.ahg.com Vulnerability: Directory Traversal Date: November 25, 2004 Discovered by: Zero X loadpage.cgi of EZshopper allows Directory Traversal Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.html - Zero X -...
[Full-Disclosure] STG Security Advisory: [SSA-20041122-10] KorWeblog directory traversal vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-10 KorWeblog directory traversal vulnerability Revision 1.3 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== KorWeblog is a weblog application us...
[SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal
-------------------------------------------------------------------------- Debian Security Advisory DSA 574-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...
CVE-2004-0792
Directory traversal vulnerability in the sanitizepath function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files...
Tridcomm directory traversal
No description provided...
Directory traversal in Tridcomm 1.3
Luigi Auriemma Application: Tridcomm http://www.tridcomm.com Versions: = 1.3 Platforms: Windows Bug: directory traversal both download and upload Exploitation: remote, versus the built-in FTP server Date: 06 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
Apache < 2.0.40 Win32 Directory Traversal File Access
Binary data 1498.prm...
Apache < 1.3.14 Multiple Forward Slash Directory Listing
Binary data 1625.prm...
vqServer < 1.9.30 Directory Traversal File Access
Binary data 1456.prm...
IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal
source: https://www.securityfocus.com/bid/10841/info IBM Tivoli Directory Server is reported to contain a directory traversal vulnerability in its web front-end application. This issue presents itself due to insufficient sanitization of user-supplied data. This issue allows remote attackers to vi...
Mandrake Linux Security Advisory : unzip (MDKSA-2002:065)
A directory traversal vulnerability was discovered in unzip version 5.42 and earlier that allows attackers to overwrite arbitrary files during extraction of the archive by using a '..' dot dot in an extracted filename, as well as prefixing filenames in the archive with '/' slash. %NASLMINLEVEL...
[Full-Disclosure] [SECURITY] [DSA 499-1] New rsync packages fix directory traversal bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 499-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...
