phpspamman-disclose.txt

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

PuTTY Buffer Overflow

This module exploits a buffer overflow in the PuTTY SSH client that is triggered through a validation error in SSH.c. This vulnerability affects versions 0.53 and earlier. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

CVE-2006-0950

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...

DEBIAN-CVE-2006-0950

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...

CVE-2006-0950

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...

Secunia Research: unalz Filename Handling Directory Traversal Vulnerability

====================================================================== Secunia Research 13/03/2006 - unalz Filename Handling Directory Traversal Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2005-3862

CVE-2005-3862 affects the unalz decompressor for ALZ archives. Debian advisories (DSA-959-1) document a buffer overflow caused by insufficient bounds checking when parsing file names, enabling arbitrary code execution via a crafted ALZ archive. Remediation in provided docs: upgrade unalz to versi...

PT-2003-1349 · Simon Tatham · Putty

Name of the Vulnerable Software and Affected Versions: PuTTY version 0.53 Description: The issue allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal. This could happen when the user views a file...