Searching logfile software vulnerabilities

Directory traversal vulnerability in the logfil

vulnerability | arbitrary | attackers | traversal | Directory | earlier | service | logfile | Wingate | remote | allows | files | Beta | read | via |

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.


Format string vulnerability in the printlog fun

vulnerability | function | log2mail | printlog | before | Format | string |

Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.


CRLF injection vulnerability in the cmdIS.DLL p

vulnerability | sequences | attackers | injection | possibly | cmdISDLL | injected | entries | request | command | logfile | Server | plugin | allows | remote | using | spoof | files | HTTPD | HTTP | type | 142n | CRLF | hide | read | via |

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.


The Logfile feature in Yahoo! Messenger 5.x thr

Messenger | activated | through | Logfile | feature | Yahoo | can |

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users.


Format string vulnerability in the write_logfil

vulnerability | write_logfile | function | before | string | Format | ELOG |

Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service (server crash) via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


X.Org server (xorg-server) 1.0.0 and later, X11

server | XOrg |

X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.


AWStats 6.5, and possibly other versions, allow

metacharacters | authenticated | configuration | configdir | arbitrary | directive | awstatspl | parameter | contains | versions | possibly | LogFile | execute | AWStats | access | upload | remote | allows | shell | users | using | whose | other | then | code | file | name |

AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.


The privoxy configuration file in Tor before 0.

configuration | privoxy | before | file | Tor |

The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information.


Multiple directory traversal vulnerabilities in

vulnerabilities | traversal | directory | WebAdmin | Multiple | Alt-N |

Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated global administrators to read arbitrary files via a .. (dot dot) in the file parameter to (1) logfile_view.wdm and (2) configfile_view.wdm.


Unspecified vulnerability in Oracle Database 9.

vulnerability | Unspecified | Database | Oracle |

Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbms_log_mnr privileges, aka DB04. NOTE: Oracle has not disputed a reliable researcher claim that this is a buffer overflow in the ADD_LOGFILE procedure for the SYS.DBMS_LOGMNR package that allows code execution.


Buffer overflow in the DB Software Laboratory V

Laboratory | VImpXocx | Software | overflow | ActiveX | control | Buffer | VImpX |

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter.


Multiple buffer overflows in the AMX NetLinx VN

overflows | Multiple | NetLinx | buffer | VNC | AMX |

Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary code via long (1) Host, (2) Password, or (3) LogFile property values.


Software vulnerabilities results 1 to 13 of 13     
Page: 1