CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2003-0333

CVE-2003-0333 describes multiple buffer overflows in HP-UX Kermit (C-Kermit 6.0.192 and possibly earlier than 8.0) affecting HP-UX 10.20 and 11.00. Local users can gain privileges via excessively long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc), with some invocations pot...

CVE-2002-0333

Directory traversal vulnerability in xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument...

CVE-2002-0333

CVE-2002-0333 affects xtell/xtelld prior to 2.7 and 1.91.1 and allows directory traversal via a .. in the TTY argument. The vulnerability lets remote attackers read files with short names, and local users read more files through a short-name symlink. Impact described in public records includes cr...

CVE-2002-0333

Directory traversal vulnerability in xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument...

CVE-2001-0333

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. dot dot and "" characters twice...

CVE-2001-0333

A directory traversal vulnerability exists in Microsoft IIS 5.0 and earlier versions. The root cause is a flaw in how the web server handles CGI filename requests. Specifically, after the initial security check, IIS mistakenly performs a second decoding pass on the CGI filename. An attacker can e...

Immunity Canvas: IIS_DOUBLEDECODE

Name| iisdoubledecode ---|--- CVE| CVE-2001-0333 Exploit Pack| CANVAS Description| iisdoubledecode MS01-026 Notes| CVE Name: CVE-2001-0333 VENDOR: Microsoft Notes: The IIS Double Decode module will automatically use tftp to get a MOSDEF node on the remote target. This will not work through a...

CVE-2001-0333

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. dot dot and "" characters twice...

CVE-2000-0333

The CVE affects tcpdump, Ethereal, and other sniffer packages that decode DNS packets. A crafted DNS query with malformed compressed labels (a pointer that references itself or creates cycles) can cause the decoder to loop, potentially consuming all CPU and crashing the process, i.e., a denial-of...

CVE-2000-0333

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet...

CVE-1999-0333

CVE-1999-0333 affects HP OpenView OmniBack II. The issue enables remote root execution via spoofing and local root via a symlink attack. Affected product/versions are not exhaustively specified in the provided documents, but Red Hat/NVD entries concur on the vulnerability description. Remediation...

CVE-2000-0333

tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet...