CVE-2006-0714

Directory traversal vulnerability in the installation file sql/install-0.9.7.php in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. dot dot sequence in the adodbpath parameter...

FlySpray 0.9.7 - 'install-0.9.7.php' Remote Command Execution

works against PHP5 usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Therefore the good fighter will be terrible in his onset, and prompt in his decision" / short explaination: found this bug in FlySpray, exploiting EGS Enterprise Groupware System 1.0 rc4, see this link for...

CVE-2005-3334

Cross-site scripting XSS vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 devel allows remote attackers to inject arbitrary web script or HTML via the 1 PHPSESSID, 2 task, 3 string, 4 type, 5 serv, 6 due, 7 dev, and 8 sort2 parameters...

flysprayXSS.txt

Flyspray "The bug killer" multiple variable Cross-Site Scripting vendor url:http://flyspray.rocks.cc/ Vendor specific bug report: http://flyspray.rocks.cc/bts/task/703 Advisore:http://lostmon.blogspot.com/2005/10/ flyspray-bug-killer-multiple-variable.html vendor notify:yes exploit available:yes...

[SA17316] Flyspray Cross-Site Scripting Vulnerabilities

TITLE: Flyspray Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA17316 VERIFY ADVISORY: http://secunia.com/advisories/17316/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Flyspray 0.x http://secunia.com/product/5995/ DESCRIPTION: Lostmon has reported...

Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability

Airscanner Mobile Security Advisory 05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability Product: vxFtpSrv 0.9.7 Platform: Tested on Windows Mobile Pocket PC 2003 Requirements: Mobile device running Windows Mobile Pocket PC with vxFtpSrv 0.9.7 installed and running. Credit...

security flaw

The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...

DEBIAN-CVE-2003-0545

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding...

CAN-2003-0543/0544 OpenSSL ASN.1 protocol crashes

Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service crash via an SSL client certificate with certain ASN.1 tag values...

PT-2002-2278 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.9.7 and earlier Description: The issue is related to multiple integer signedness errors in the BGP dissector. This can be exploited by remote attackers who send malformed messages, resulting in a denial of service due to an...

security flaw

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings...

security flaw

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings...

CVE-2002-0354

The CVE-2002-0354 issue concerns the XMLHttpRequest (XMLHTTP) object in Netscape 6.1 and Mozilla 0.9.7. It permits remote attackers to read arbitrary files and list directories on a client by directing the browser to a file via a URL redirect and then reading the result through responseText. This...

CVE-2001-0768

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, allowing local users to gain privileges as other FTP users by reading the file. This is a local privilege escalation through credential disclosure; no exploit specifics are provided in the available documents. R...

CVE-2001-0767

CVE-2001-0767 corresponds to a directory traversal flaw in GuildFTPd. Multiple sources (NVD and OpenVAS entries) document that versions around 0.9x/0.97 are affected, allowing an attacker with a valid FTP login to read arbitrary files and directories by inserting .. in FTP commands (LS or GET). T...