123 matches found
Apache 2.2.14 mod_isapi Remote SYSTEM Exploit
/ Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a dangling pointer vulnerabilty in...
Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit
Exploit for unknown platform in category remote exploits ============================================================== Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit ============================================================== / Apache 2.2.14 modisapi Dangling Pointer Remote...
CVE-2010-0425
modules/arch/win32/modisapi.c in modisapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapiunload for an ISAPI .dll module, which allows remote attackers ...
BELL-CVE-2010-0425 CVE-2010-0425 does not affect BellSoft software
Bulletin has no description...
CVE-2010-0425
modules/arch/win32/modisapi.c in modisapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapiunload for an ISAPI .dll module, which allows remote attackers ...
CVE-2010-0425
modules/arch/win32/modisapi.c in modisapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapiunload for an ISAPI .dll module, which allows remote attackers ...
CVE-2010-0425
CVE-2010-0425 affects Apache HTTP Server on Windows with ISAPI module mod_isapi (DLLs in 2.0.37–2.0.63, 2.2.0–2.2.14, and 2.3.x before 2.3.7). Root cause: mod_isapi may unload an ISAPI DLL before request processing finishes, causing memory corruption. Impact: remote code execution or denial of se...
CVE-2009-0425
CVE-2009-0425 describes an SQL injection in the PHP file index.php of Blue Eye CMS versions 1.0.0 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands through the clanek parameter, enabling partial confidentiality and integrity impact with a high severity (CVSS...
CVE-2008-0425
CVE-2008-0425 affects Frimousse 0.0.2, in explorerdir.php, via an absolute path traversal in the name parameter. This allows remote attackers to read arbitrary files and list directories. Public exploits are referenced (e.g., Exploit-DB link 4943). The provided documents do not include a remediat...
CVE-2007-0425
BEA WebLogic Platform/Server 8.1–8.1 SP5 and JRockit 1.4.2 R4.5 and earlier are affected by an unspecified vulnerability related to an overflow condition (likely a buffer overflow) that could allow attackers to gain privileges via unspecified vectors. The connected sources confirm the affected pr...
CVE-2006-0425
BEA WebLogic Portal 8.1 through SP4 is affected. The CVE describes a vulnerability that allows remote attackers to obtain the source for a deployment descriptor file. The underlying root cause and attack vectors are not specified in the provided documents. Public references consistently name BEA ...
CVE-2004-0425
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie...
CVE-2004-0425
CVE-2004-0425 describes a heap-based buffer overflow in the SiteMinder Affiliate Agent 4.x (platforms: Solaris, Windows, HP-UX) triggered by a large SMPROFILE cookie, enabling remote code execution. A vendor patch (Web Agent 4QMR6 HF-016) is available to fix cookie handling; the vulnerability is ...
CVE-2004-0425
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie...
CVE-2003-0425
Apple QuickTime/Darwin Streaming Server before 4.1.3f (Win32) is vulnerable to Web Root Traversal and Arbitrary File Disclosure via HTTP requests containing three dots to break out of the web root (e.g., /.../qtusers). The issue affects Darwin Streaming Server v4.1.3e and earlier (Win32). Fixed: ...
CVE-2003-0425
Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ... triple dot in an HTTP request...
CVE-2002-0425
The CVE affects mIRC DCC server protocol. The vulnerability allows remote attackers to access sensitive information, specifically alternate IRC nicknames, via a "100 testing" message in a DCC connection request that the user cannot ignore or cancel. This leads to disclosure of alternate nicknames...
CVE-2002-0425
mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message...
CVE-2001-0425
CVE-2001-0425 affects AdLibrary.pm in AdCycle 0.78b. The vulnerability stems from a malformed Agent: header in HTTP requests, which is inserted into a login-verification SQL query, enabling remote attackers to gain privileges. Documents explicitly describe the component and the root cause (SQL in...