145 matches found
CVE-2008-0256
CVE-2008-0256 describes multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp, and the (2) ricerca parameter to (d) thumbr...
CVE-2007-0256
CVE-2007-0256 affects VideoLAN VLC 0.8.6a, where a crafted .wmv file can cause a remote denial of service (application crash). The NVD entry assigns a CVSSv2 base score of 7.8 (HIGH) with network access, low attack complexity, and impact limited to availability. Public sources in the connected da...
War-FTPD 1.65 Password Overflow
This exploits the buffer overflow found in the PASS command in War-FTPD 1.65. This particular module will only work reliably against Windows 2000 targets. The server must be configured to allow anonymous logins for this exploit to succeed. A failed attempt will bring down the service completely...
Oracle DBMS绕过登录访问控制漏洞
BUGTRAQ ID: 16287 CVECAN ID: CVE-2006-0256 Oracle Database是一款大型商业数据库系统。 Oracle Database的登录过程实现存在漏洞，远程攻击者可能在登录过程中对服务器进行SQL注入攻击。...
CVE-2006-0256
CVE-2006-0256 affects Oracle Database Server in multiple versions (e.g., 8.1.7.x, 9.2.x, 10g) with an unspecified impact in the CVE record. Connected sources describe a login-time SQL injection vulnerability in the Oracle DBMS login/authentication flow (AUTH_ALTER_SESSION) that could enable remot...
FTPD glob (too many *) DoS Vulnerability
WU-FTPD is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
Solaris 10 (x86) : 120086-02
SunOS 5.10x86: patch usr/sbin/in.ftpd. Date this patch was last updated by Sun : Apr/16/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
CVE-2005-0256
The wufnmatch function in wufnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service CPU exhaustion by recursion via a glob pattern with a large number of wildcard characters, as demonstrated using the dir command...
[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...
DSA-705-1 wu-ftpd - missing input sanitising
Bulletin has no description...
CVE-2005-0256
The wufnmatch function in wufnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service CPU exhaustion by recursion via a glob pattern with a large number of wildcard characters, as demonstrated using the dir command...
CVE-2005-0256
CVE-2005-0256 affects wu-ftpd 2.6.1/2.6.2, where the wu_fnmatch function can trigger excessive recursion on glob patterns with many * characters, causing a denial-of-service (CPU exhaustion). The issue arises from the wildcard handling in wu_fnmatch.c, exploitable via the dir command as described...
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...
CVE-2004-0256
CVE-2004-0256 affects GNU libtool and concerns versions prior to 1.5.2. During compilation, libtool directories created under /tmp can be tricked by a symlink, allowing a local user to overwrite arbitrary files. The documented impact is a local, user-level vulnerability with no remote access requ...
CVE-2003-0256
The CVE affects kopete prior to version 0.6.2, specifically its GnuPG plugin. The issue arises because the plugin does not properly sanitize the command line passed to gpg, enabling remote attackers to execute arbitrary commands in the user’s kopete client context by sending specially crafted mes...
CVE-2002-0256
CVE-2002-0256 affects the Telnet service of the Arescom NetDSL 1000 router. Affected component: Telnet port. Root cause: remote attackers can trigger a denial-of-service by sending a sequence of connections containing long strings, causing a large number of login failures and stopping the Telnet ...
CVE-2002-0256
The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop...