CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
3295 | CVE-2001-0478 | Candidate | Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. | Proposed (20010524) | ACCEPT(2) Baker, Cole | MODIFY(1) Frech | NOOP(4) Christey, Renaud, Wall, Ziese | REVIEWING(1) Williams | Frech> XF:phpmyadmin-sqlphp-include-file(6483) | Christey> Double-check the version number - is it 2.1.0 or 2.2.0? | CONFIRM:http://phpmyadmin.sourceforge.net/ChangeLog.txt | Item 2001-04-28 says "applied security patch from [Secure | Reality] | The patch implies that tbl_replace.php was also affected. | View |
3296 | CVE-2001-0479 | Candidate | Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. | Proposed (20010524) | ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(5) Balinsky, Cole, Renaud, Wall, Ziese | REVIEWING(1) Williams | Frech> XF:phppgadmin-sqlphp-include-file(6484) | Balinsky> Advisory site no longer exists. There is not enough detail in the advisory, and the vendor does not acknowledge. | View |
3297 | CVE-2001-0480 | Candidate | Directory traversal vulnerability in Alex"s FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands. | Proposed (20010524) | ACCEPT(2) Cole, Williams | MODIFY(1) Frech | NOOP(3) Balinsky, Wall, Ziese | Frech> XF:alex-ftp-directory-traversal(6475) | View |
3300 | CVE-2001-0483 | Candidate | Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set. | Proposed (20010524) | ACCEPT(1) Cole | MODIFY(1) Frech | NOOP(2) Wall, Ziese | Frech> XF:raptor-http-access-ports(6313) | View |
3307 | CVE-2001-0490 | Candidate | Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. | Proposed (20010524) | MODIFY(1) Frech | NOOP(4) Cole, Renaud, Wall, Ziese | REVIEWING(1) Williams | Frech> XF:winamp-aip-bo(6479) | View |
Page 20659 of 20943, showing 5 records out of 104715 total, starting on record 103291, ending on 103295