630 matches found
PHP < 5.2.9 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.9. Such versions may be affected by several security issues : - Background color is not correctly validated with a non true color image in function 'imagerotate'. CVE-2008-5498 - A denial of service conditi...
CVE-2008-0758
Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...
Directory traversal
Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...
Directory traversal
Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...
CVE-2008-0480
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...
CVE-2008-0479
Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...
Mozilla Forefox jar: URL crossite scripting
It's possible to fire crossite scripting attack via jar: protocol by uploading JAR, DOC, ZIP, etc files...
CVE-2003-1376
WinZip 8.0 is affected. The vulnerability stems from weak random number generation used for password protected ZIP files, allowing local attackers to brute force encryption keys by guessing the state of the ZIP stream coder. Reported impact is partial confidentiality, integrity, and availability....
CVE-2003-1376
WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder...
Windows compressed folders buffer overflow
Added: 05/15/2006 CVE: CVE-2004-0575 BID: 11382 OSVDB: 10695 Background Microsoft Windows XP and Windows Server 2003 include the ability to natively handle ZIP files. Problem A buffer overflow when handling compressed folders allows command execution when a specially crafted ZIP file is opened by...
Windows compressed folders buffer overflow
Added: 05/15/2006 CVE: CVE-2004-0575 BID: 11382 OSVDB: 10695 Background Microsoft Windows XP and Windows Server 2003 include the ability to natively handle ZIP files. Problem A buffer overflow when handling compressed folders allows command execution when a specially crafted ZIP file is opened by...
Windows compressed folders buffer overflow
Added: 05/15/2006 CVE: CVE-2004-0575 BID: 11382 OSVDB: 10695 Background Microsoft Windows XP and Windows Server 2003 include the ability to natively handle ZIP files. Problem A buffer overflow when handling compressed folders allows command execution when a specially crafted ZIP file is opened by...
[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1012-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2006 http://www.debian.org/security/faq -...
Archive_Tar v 1.2(Tested) (Tar file management class) Directory traversal
ArchiveZipr Zip file management class Directory traversal This class provides handling of tar files in PHP. It supports creating, listing, extracting and adding to tar files. Gzip support is available if PHP has the zlib extension built-in or loaded. Bz2 compression is also supported with the bz2...
Sophos antivirus ZIP files Denial of Service
Infinite loop while parsing ZIP files with BZIP2 comperssion and invalid archive length...
CVE-2005-1706
Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote attackers to bypass virus detection...
CVE-2005-1706: Undefined Security Weakness
Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote attackers to bypass virus detection...
CVE-2005-0668: Undefined Security Weakness
Unknown vulnerability in HTTP Anti Virus Proxy HAVP before 0.51 prevents viruses from being properly detected in certain files such as 1 .CAB or 2 .ZIP files...
CVE-2005-0668
Unknown vulnerability in HTTP Anti Virus Proxy HAVP before 0.51 prevents viruses from being properly detected in certain files such as 1 .CAB or 2 .ZIP files...
CVE-2005-0519
Summary: CVE-2005-0519 and CVE-2005-0520 affect ArGoSoft FTP Server prior to 1.4.2.8. The server allows remote attackers to read arbitrary files by abusing shortcut files (.LNK) during FTP operations using SITE UNZIP or SITE COPY, leading to a read (and potentially write) access to files on the s...