Vulners
Lucene search
Newsgrab 0.5.0pre4 Multiple Local And Remote Vulnerabilities
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | newsgrab -- directory traversal vulnerability | 18 Jan 200500:00 | – | freebsd |
| newsgrab -- insecure file and directory creation | 18 Jan 200500:00 | – | freebsd |
 | CVE-2005-0153: newsgrab file names directory traversal | 2 Feb 200500:00 | – | cve |
| CVE-2005-0154: newsgrab newsgrab.pl file information disclosure | 2 Feb 200500:00 | – | cve |
 | Newsgrab 0.5.0pre4 - Multiple LocalRemote Vulnerabilities | 2 Feb 200500:00 | – | exploitpack |
 | FreeBSD : newsgrab -- directory traversal vulnerability (35f6093c-73c3-11d9-8a93-00065be4b5b6) | 13 Jul 200500:00 | – | nessus |
| FreeBSD : newsgrab -- insecure file and directory creation (cd7e260a-6bff-11d9-a5df-00065be4b5b6) | 13 Jul 200500:00 | – | nessus |
 | FreeBSD Ports: newsgrab | 4 Sep 200800:00 | – | openvas |
| FreeBSD Ports: newsgrab | 4 Sep 200800:00 | – | openvas |
| FreeBSD Ports: newsgrab | 4 Sep 200800:00 | – | openvas |
10
source: http://www.securityfocus.com/bid/12428/info
Newsgrab is reported prone to multiple vulnerabilities. The following individual issues are reported:
Newsgrab is reported prone to a directory traversal vulnerability. This vulnerability exists because the software does not sufficiently sanitize directory traversal sequences from filenames before the filename is employed to store the file onto disk.
A remote attacker may exploit this vulnerability by supplying a malicious file to a target victim. This vulnerability has been assigned the CVE identifier CAN-2005-0153.
Newsgrab is reported prone to an unspecified insecure permissions vulnerability.
A local attacker may exploit this vulnerability to disclose potentially sensitive information that is contained in files that were downloaded using newsgrab. This vulnerability has been assigned the CVE identifier CAN-2005-0154.
A file containing the name '../../../../etc/rc.local' and the mode 777 could cause newsgrab to drop the file at /etc/rc.local with 777 permissions.
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2014 00:00Current
6.5Medium risk
Vulners AI Score6.5