Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021.

CVE-1999-1590 describes a directory traversal vulnerability in version 2.3 of the wwwcount software, specifically in the Count.cgi script developed by Muhammad A. Muquit. This vulnerability allows remote attackers to read arbitrary GIF files on the server by exploiting improper input validation of the 'image' parameter. By including ".." sequences in the parameter, an attacker can traverse directories and access files outside the intended directory scope. This is distinct from another vulnerability identified as CVE-1999-0021. The vulnerability requires some level of authentication (as indicated by the CVSS vector), and the attack complexity is moderate. The impact is limited to confidentiality, allowing attackers to read certain files but not modify or delete them. No patches are available for this vulnerability, and there are no known exploits in the wild. Given the age of the vulnerability (published in 1999) and the low CVSS score of 3.5, it is considered a low-severity issue today, but it could still pose a risk in legacy systems that continue to run this outdated software without mitigation.

NVD CVE Feed

Detailed information about CVE-1999-1590: Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attac affecting wwwcoun

CVE-1999-1590: Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attac - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1590: Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attac

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.

CVE-1999-1177 describes a directory traversal vulnerability in the nph-publish script, a component developed by Lincoln D. Stein used for uploading files to a web server. The vulnerability exists in versions prior to 1.2 of nph-publish, where the script fails to properly sanitize user-supplied input in the pathname during upload operations. Specifically, an attacker can include '..' (dot dot) sequences in the file path, which allows them to traverse directories outside the intended upload directory. This traversal can enable the attacker to overwrite arbitrary files on the server's filesystem. Since the vulnerability allows overwriting files without authentication and requires only network access, it poses a significant risk to the integrity of the affected system. However, the vulnerability does not directly impact confidentiality or availability, as it does not provide read access or denial of service capabilities. The CVSS score of 5.0 (medium severity) reflects these characteristics, with an attack vector of network (AV:N), low attack complexity (AC:L), no authentication required (Au:N), no confidentiality impact (C:N), partial integrity impact (I:P), and no availability impact (A:N). No patches are available for this vulnerability, and there are no known exploits in the wild, likely due to the age of the software and the vulnerability. Nonetheless, systems still running vulnerable versions of nph-publish remain at risk of arbitrary file overwrites, which could lead to defacement, insertion of malicious code, or other integrity compromises.

Detailed information about CVE-1999-1177: Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arb affecting lincoln

CVE-1999-1177: Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arb - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1177: Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arb

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.

CVE-1999-1050 is a directory traversal vulnerability found in the Matt Wright FormHandler.cgi script versions 1.0, 2.0, and 3.0. This vulnerability allows remote attackers to read arbitrary files on the affected server by exploiting improper input validation in the 'reply_message_attach' attachment parameter or by specifying a filename as a template. Specifically, attackers can use '..' (dot dot) sequences to traverse directories outside the intended web root or script directory, thereby accessing sensitive files that should not be exposed. The vulnerability does not require authentication and can be exploited over the network (AV:N), with low attack complexity (AC:L). The impact is primarily on confidentiality, as attackers can read files but cannot modify them or disrupt service (no integrity or availability impact). The vulnerability was published in 1999, and no patches are available, reflecting the age and likely obsolescence of the affected software. No known exploits are currently reported in the wild. The CVSS score is 5.0 (medium severity), reflecting the moderate risk posed by unauthorized file disclosure without further system compromise.

Detailed information about CVE-1999-1050: Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to r affecting matt_wr

CVE-1999-1050: Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to r - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1050: Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to r

Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.

CVE-1999-1509 is a directory traversal vulnerability found in the Etype Eserv 2.50 web server. This vulnerability allows a remote attacker to exploit the web server by including ".." (dot dot) sequences in a URL to traverse directories outside the intended web root directory. By doing so, the attacker can read arbitrary files on the underlying file system that the web server process has permission to access. The vulnerability does not require any authentication and can be exploited remotely over the network. The vulnerability impacts confidentiality as sensitive files such as configuration files, password files, or other sensitive data could be exposed. However, it does not affect integrity or availability directly. The CVSS score is 5.0 (medium severity) with vector AV:N/AC:L/Au:N/C:P/I:N/A:N, indicating network attack vector, low attack complexity, no authentication required, partial confidentiality impact, and no impact on integrity or availability. No patches or fixes are available for this vulnerability, and there are no known exploits in the wild documented. Given the age of the vulnerability (published in 1999) and the specific product (Etype Eserv 2.50), it is likely that this software is legacy or obsolete, but if still in use, it poses a risk of unauthorized file disclosure via directory traversal.

Detailed information about CVE-1999-1509: Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read an affecting etype e

CVE-1999-1509: Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read an - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1509: Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read an

Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.

CVE-1999-1083 is a directory traversal vulnerability found in the Jana proxy web server versions 1.0, 1.45, and 1.46. This vulnerability allows remote attackers to exploit the web server by sending specially crafted requests containing ".." sequences (dot-dot attacks) to traverse directories outside the intended web root. By doing so, attackers can access arbitrary files on the server's filesystem that should normally be inaccessible via the web interface. The vulnerability does not require authentication and can be exploited remotely over the network. The CVSS score of 5.0 (medium severity) reflects that the attack vector is network-based with low complexity and no authentication required. The impact is primarily on confidentiality, as attackers can read sensitive files, but it does not affect integrity or availability. No patches are available for this vulnerability, and there are no known exploits in the wild. Given the age of the vulnerability (published in 1999) and the specific product affected, this issue is mostly relevant to legacy systems still running the Jana proxy web server. The vulnerability highlights the classic risk of insufficient input validation in web servers allowing directory traversal attacks, which remain a common security problem in web applications and servers.

Detailed information about CVE-1999-1083: Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arb affecting t._hauc

CVE-1999-1083: Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arb - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1083: Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arb

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.

CVE-1999-1082 is a directory traversal vulnerability found in the Jana proxy web server versions 1.0, 1.40, 1.45, and 1.46. This vulnerability allows remote attackers to access arbitrary files on the affected server by exploiting a "......" (modified dot dot) attack. Directory traversal attacks manipulate file path inputs to access files and directories outside the intended web root directory. In this case, the attacker can craft a specially formed URL containing sequences of dots and slashes that bypass normal path restrictions, enabling unauthorized reading of sensitive files on the server's filesystem. The vulnerability does not require authentication and can be exploited remotely over the network. According to the CVSS v2 vector (AV:N/AC:L/Au:N/C:P/I:N/A:N), the attack has network attack vector, low attack complexity, no authentication required, and impacts confidentiality by allowing unauthorized disclosure of information. There is no impact on integrity or availability. No patches are available for this vulnerability, and there are no known exploits in the wild. Given the age of the vulnerability (published in 1999) and the specific product affected, it is likely that this vulnerability is relevant only in legacy environments still running the Jana proxy web server. Modern web servers and proxies have largely replaced this software. However, if still in use, this vulnerability poses a risk of sensitive data exposure through unauthorized file reads.

Detailed information about CVE-1999-1082: Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arb affecting t._hauc

CVE-1999-1082: Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arb - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1082: Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arb

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.

CVE-1999-1351 describes a directory traversal vulnerability found in version 0.9.0 of the KVIrc IRC client, specifically when the "Listen to !nick <soundname> requests" option is enabled. This vulnerability allows a remote attacker to exploit the DCC GET request mechanism by including ".." (dot dot) sequences in the file path, enabling traversal outside the intended directory. As a result, an attacker can read arbitrary files on the victim's system without authentication or user interaction. The vulnerability affects the confidentiality of the system by exposing potentially sensitive files but does not impact integrity or availability. The vulnerability is remotely exploitable over the network with low attack complexity and no authentication required. The CVSS score of 5.0 (medium severity) reflects these characteristics. No patches or fixes are available, and there are no known exploits in the wild. Given the age of the vulnerability (published in 1999) and the specific affected software version, the threat is limited to environments still running this outdated IRC client version with the vulnerable option enabled.

Detailed information about CVE-1999-1351: Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> re affecting kvirc i

CVE-1999-1351: Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> re - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-1351: Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> re

Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.

CVE-1999-0270 is a directory traversal vulnerability found in the pfdispaly.cgi program (also referred to as "pfdisplay"), which is part of SGI's Performer API Search Tool (performer_tools) running on the IRIX operating system versions 6.2, 6.3, and 6.4. This vulnerability allows remote attackers to exploit insufficient input validation in the CGI script, enabling them to traverse directories outside the intended web root by manipulating file path parameters. As a result, attackers can read arbitrary files on the affected system without authentication, potentially exposing sensitive configuration files, password files, or other critical data. The vulnerability is remotely exploitable over the network without requiring user interaction or authentication, making it a significant risk for exposed systems. The CVSS score of 5.0 (medium severity) reflects the partial confidentiality impact (read access to files), with no impact on integrity or availability. A patch addressing this vulnerability is available from SGI, distributed via their security advisories in April 1998. No known exploits have been reported in the wild, likely due to the age and niche usage of the affected platform. However, the vulnerability remains relevant for legacy systems still running IRIX with the vulnerable performer_tools installed.

Detailed information about CVE-1999-0270: Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") fo affecting sgi iri

CVE-1999-0270: Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") fo - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-1999-0270: Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") fo

Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.

CVE-1999-1069 describes a directory traversal vulnerability in the carbo.dll component of iCat Carbo Server version 3.0.0, an electronic commerce suite. The vulnerability arises from improper validation of the 'icatcommand' parameter, which allows remote attackers to include '..' sequences (dot-dot) to traverse directories outside the intended web root or application directory. This traversal enables attackers to read arbitrary files on the server's filesystem that the web server process has permission to access. The vulnerability does not require authentication and can be exploited remotely over the network. The CVSS score of 5.0 (medium severity) reflects that the attack vector is network-based, requires no authentication, and impacts confidentiality by allowing unauthorized file disclosure. However, it does not affect integrity or availability. No patch is available for this vulnerability, and no known exploits have been reported in the wild. Given the vintage of the software (published in 1997) and the product version (3.0.0), this vulnerability is relevant primarily for legacy systems still running this outdated e-commerce server software. The directory traversal issue is a classic web application security flaw that can expose sensitive configuration files, credentials, or other critical data stored on the server, potentially leading to further compromise if attackers leverage disclosed information for subsequent attacks.

Detailed information about CVE-1999-1069: Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to affecting icat el

CVE-1999-1069: Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'directory traversal'

Filter Threats

Threats Tagged 'directory traversal'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility