4 matches found
CVE-2004-1548
The CVE-2004-1548 entry concerns ActivePost Standard 3.1, specifically a Directory traversal vulnerability in its file server. Remote authenticated users can upload arbitrary files by manipulating the filename with a .. (dot dot) sequence. The provided documents describe the vulnerability vector ...
CVE-2004-1547
CVE-2004-1547 affects ActivePost Standard 3.1 and earlier. The file server allows remote authenticated users to cause a denial of service (application crash) by supplying a long filename, with the description noting a possible buffer overflow as the underlying issue. The available documents do no...
CVE-2004-2616
The CVE-2004-2616 entry concerns the file server in ActivePost Standard 3.1 and earlier. Affected software : ActivePost Standard (versions up to 3.1). Vulnerability : remote authenticated users can upload a file and obtain sensitive information; a success message reveals the path, indicating info...
CVE-2004-1549
The CVE affects ActivePost Standard 3.1: the conference menu transmits passwords for password-protected rooms in cleartext, enabling a network observer to capture sensitive credentials. No explicit remediation details are provided in the connected documents; exploitation specifics (or patches) ar...