2761 matches found
Remote buffer overflow in DCOM VB T-SQL debugger
BindView Security Advisory -------- Remote buffer overflow in DCOM VB T-SQL debugger Issue Date: March 27, 2001 Contact: [email protected] Topic: Remote buffer overflow in DCOM VB T-SQL debugger Overview: Microsoft Developer Studio version 6 installs a world-launchable DCOM object, known ...
CVE-2001-0168
CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...
CVE-2001-0167
Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...
CVE-2001-0168
Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...
CVE-2001-0167: Undefined Security Weakness
Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...
CVE-2001-0231: Undefined Security Weakness
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...
CVE-2001-0168: Undefined Security Weakness
Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...
WinVNC Web Server GET Overflow
This module exploits a buffer overflow in the AT&T WinVNC version use exploit/windows/vnc/winvnc/httpget msf undefinedhttpget show actions ...actions... msf undefinedhttpget set ACTION msf undefinedhttpget show options ...show and set options... msf undefinedhttpget run This module requires...
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-1030
CS&T CorporateTime for the Web is vulnerable to user enumeration: it returns different error messages for invalid usernames vs invalid passwords, allowing remote attackers to determine valid usernames on the server. Root cause is inconsistent authentication error handling; impact is partial confi...
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-1030: Undefined Security Weakness
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-0801: Undefined Security Weakness
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option...
CVE-1999-0796
Technical details about CVE-1999-0796 are not publicly available in the provided documents. Monitor for updates.
CVE-1999-0796
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks...
CVE-1999-0796: Undefined Security Weakness
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks...
ATT_DoS.txt
Subject: DoS attack on AT&T Wireless text-messaging service To: [email protected] Recently, I've had the misfortune of having an automated process at work that reports errors to my PCS phone via email, [email protected] go haywire, and send me a hundred or so messages a day. Even...
FreeBSD-SA-98:03.ttcp
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-98:03 Security Advisory FreeBSD, Inc. Topic: Problems with TTCP Category: core Module: kernel Announced: 1998-05-14, revised at 1998-05-18 Affects: FreeBSD 2.1. FreeBSD 2.2....