exploits , vulnerabilities , articles , UBBThreads/WWWThreads Arbitrary File Upload Vulnerability

Title	UBBThreads/WWWThreads Arbitrary File Upload Vulnerability
Published	2002-01-30-12:00AM
Updated	2002-01-30-11:26PM
Class	Input Validation Error
CVE	CAN-2002-0223
Remote	Yes
Local	No
Credit	This issue was submitted to BugTraq by Root Extractor <condor@phreaker.net> on January 30th, 2002.
Vulnerable	Wired Community Software WWWThreads 5.0 .9 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Microsoft IIS 4.0 Microsoft IIS 5.0 Wired Community Software WWWThreads 5.0 .8 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Microsoft IIS 4.0 Microsoft IIS 5.0 Wired Community Software WWWThreads 5.0 .6 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Microsoft IIS 4.0 Microsoft IIS 5.0 Wired Community Software WWWThreads 5.0 Infopop UBBThreads 5.4 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Microsoft IIS 4.0 Microsoft IIS 5.0
Not Vulnerable	Infopop UBBThreads 5.5 - Apache Software Foundation Apache 1.3.17 - Apache Software Foundation Apache 1.3.18 - Apache Software Foundation Apache 1.3.19 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache for Windows 1.3.17 - Apache Software Foundation Apache for Windows 1.3.18 - Apache Software Foundation Apache for Windows 1.3.19 - Apache Software Foundation Apache for Windows 1.3.20 - Microsoft IIS 4.0 - Microsoft IIS 5.0
Code	There is no exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability