98 matches found
MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)
The remote host is running a version of the ASP.NET framework that contains multiple vulnerabilities : - A PE Loader vulnerability could allow an attacker to execute arbitrary code with the privileges of the logged-on user. - An ASP.NET NULL byte termination vulnerability could allow an attacker ...
[SECURITY] [DSA 1000-2] New Apache2::Request packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1000-2 [email protected] http://www.debian.org/security/ Martin Schulze April 3rd, 2006 http://www.debian.org/security/faq -...
DEBIAN-CVE-2006-0042
Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...
CVE-2006-0042
Unspecified vulnerability in 1 apreqparseheaders and 2 apreqparseurlencoded functions in Apache2::Request Libapreq2 before 2.07 allows remote attackers to cause a denial of service CPU consumption via unknown attack vectors that result in quadratic computational complexity...
CVE-2006-0042
Summary: CVE-2006-0042 corresponds to a vulnerability in Apache2::Request (Libapreq2) up through versions before 2.07. The issue stems from an algorithm weakness in the apreq_parse_headers() and apreq_parse_urlencoded() functions that can be exploited remotely to cause a Denial of Service via CPU...
CVE-2004-0042
CVE-2004-0042 concerns vsftpd 1.1.3, where the login error messages differ based on whether a supplied username exists. The underlying effect is information disclosure: remote attackers can determine valid usernames on the server. The available connected sources corroborate the version (vsftpd 1....
CVE-2004-0042
vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames...
CVE-2002-0042
CVE-2002-0042 affects SGI IRIX XFS: local users can cause a hang/Denial of Service by creating a file not properly processed by XFS on IRIX
CVE-2003-0042
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character...
CVE-2003-0042
CVE-2003-0042 affects Apache Jakarta Tomcat up to version 3.3.1a when used with JDK 1.3.1 or earlier. The vulnerability lets remote attackers cause directory listings and disclose JSP/source via a URL containing a null character, bypassing index.html or other welcome-file safeguards. Root cause i...
CVE-2003-0042
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character...
Fixed in Apache Tomcat 3.3.1a
Important: Information disclosure CVE-2003-0043 When used with JDK 1.3.1 or earlier, web.xml files were read with trusted privileges enabling files outside of the web application to be read even when running under a security manager. Affects: 3.0, 3.1-3.1.1, 3.2-3.2.4, 3.3a-3.3.1 Important:...
CVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...
CVE-2000-0042
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command...
CVE-2000-0042
CVE-2000-0042 : Buffer overflow in the CSM Mail Server when handling a long HELO command allows remote attackers to cause a denial of service and potentially execute commands. Affected: CSM Mail Server (MTA). Consequence: crash or arbitrary code execution as per sources. Remediation: apply vendor...
CVE-1999-0042
CVE-1999-0042 describes a buffer overflow in University of Washington's IMAP and POP servers. The widely cited details come from multiple connected sources, including a Nessus plugin that specifies a remote buffer overflow in the IMAP server login() function which may allow a remote user to gain ...
UoW IMAP/POP server_login() Function Remote Overflow
A remote buffer overflow in this IMAP server may allow a remote user to gain root privileges. University of Washington IMAP server is known to be affected. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10125; scriptversion "1.32"; scriptcveid"CVE-1999-0042";...