2620 matches found
CVE-2005-2060
Multiple HTTP Response Splitting vulnerabilities in 1 toggleshow.php, 2 togglecats.php, and 3 showprofile.php in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the Cat parameter...
Finjan SurfinGate content filtering protection bypass
It's possible to bypass URL filtering by using escape sequences...
osCommere HTTP Response Splitting
GulfTech Security Research June 10th, 2005 Vendor : osCommerce URL : http://www.oscommerce.com/ Version : osCommerce 2.2 Milestone 2 && Earlier Risk : HTTP Response Splitting Description: osCommerce is a very popular eCommerce application that allows for individuals to host their own online shop...
CVE-2005-1791
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...
CVE-2005-1791: Undefined Security Weakness
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...
CVE-2004-2121: Undefined Security Weakness
Multiple directory traversal vulnerabilities in Borland Web Server BWS 1.0b3 and earlier allow remote attackers to read and download arbitrary files via 1 multi-dot "......" sequences, or 2 "%5c%2e%2e" encoded ".." sequences, in the URL...
CVE-2004-2032: Undefined Security Weakness
Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20 hex-encoded space sequences...
CVE-2004-2035: Undefined Security Weakness
MiniShare 1.3.2 allows remote attackers to cause a denial of service crash via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences...
CVE-2005-1342
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
CVE-2005-1342
CVE-2005-1342 affects Apple Terminal on Mac OS X 10.3.9 where the x-man-page URI handler fails to sanitize terminal escape sequences, enabling remote command execution. The underlying issue is lack of input sanitization for x-man-page URIs, which could lead to arbitrary commands executed in the T...
CVE-2005-1342: Undefined Security Weakness
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
CVE-2005-1341: Undefined Security Weakness
Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences...
CVE-2005-0450
Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing 1 .. dot dot or 2 "%2e%2e" encoded dot dot sequences...
CVE-2005-0574
Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. dot dot sequences in the URL...
DEBIAN-CVE-2005-0764
Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences...
DEBIAN-CVE-2005-0437
Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. dot dot sequences in the loadplugin parameter...
CVE-2005-0764
Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences...
CVE-2005-0927
Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...
