FreeBSD-SA-06:08.sack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:08.sack Security Advisory The FreeBSD Project Topic: Infinite loop in SACK handling Category: core Module: netinet Announced: 2006-02-01 Credits: Scott Wood...

CVE-2005-0433

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to 1 db.php, 2 mainfile.php, 3 Downloads/index.php, or 4 WebLinks/index.php, which lists the path in a PHP error message...

CVE-2005-0433

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to 1 db.php, 2 mainfile.php, 3 Downloads/index.php, or 4 WebLinks/index.php, which lists the path in a PHP error message...

CVE-2005-0433

Technical details about CVE-2005-0433 are not publicly provided in the supplied documents. Available sources describe a path disclosure in Php-Nuke 7.5. Monitor for updates on affected versions, impact, and fixes.

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

CVE-2004-0433

CVE-2004-0433: Multiple buffer overflows in the RTSP client handling of RealRTSP streams affect MPlayer (before 1.0pre4) and xine-lib (before 1-rc4). The flaws enable denial of service (crash) and potentially arbitrary code execution via long URLs, long Real server responses, or long RDT packets....

CVE-2003-0433

CVE-2003-0433 affects gnocatan 0.6.1 and earlier. Multiple buffer overflows in the server could allow an attacker to execute arbitrary code, potentially gaining shell access or taking control of the host. Various sources (Debian DSA-315, Red Hat advisory, OpenVAS plugin, and GNOCATAN/NASL entries...

gnocatan Multiple Buffer Overflows

The remote host is running gnocatan, an online game server. There is a flaw in this version which may allow an attacker to execute arbitrary commands on this host, with the privileges this service is running with. An attacker may exploit this flaw to gain a shell on this host. C Tenable Network...

CVE-2002-0433

Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "" wildcard or asterisk character...

CVE-2002-0433

The CVE-2002-0433 entry concerns Pi3Web 2.0.0 where remote attackers can view restricted files by issuing an HTTP request containing a wildcard character ("*"). This is an unauthorized disclosure vulnerability via crafted requests, as described in NVD and CVE records. Connected documents confirm ...

CVE-2001-0433

CVE-2001-0433 affects Savant 3.0 web server. A buffer overflow in the handling of the long Host HTTP header allows remote attackers to cause a denial of service and potentially execute arbitrary commands. Exploitation is described as remote and via crafted Host headers. No remediation details are...

CVE-2000-0433

CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...

CVE-1999-0433

XFree86 startx is affected by a symlink attack allowing local users to create files in restricted directories, potentially gaining privileges or causing a denial of service. The provided documents do not specify affected versions or a fix; one PT Security entry notes no information about a newer ...