98 matches found
iejavaprxyexploit.pl.txt
Microsoft Internet Explorer "javaprxy.dll" COM Object Exploit Unpatched Advisory : FrSIRT/ADV-2005-0935 Rated as : Critical Status : Unpatched Code : http://www.frsirt.com/exploits/20050702.iejavaprxyexploit.pl.php !/usr/bin/perl Microsoft Internet Explorer "javaprxy.dll" COM Object Exploit...
CVE-2005-0935
CVE-2005-0935 affects the ESMI PayPal Storefront. The provided documents describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through two parameters: idpages in pages.php and id2 in products1.php. The affected software is the PayPal Storefr...
CVE-2004-0935
CVE-2004-0935 affects Eset Anti-Virus prior to 1.020. A ZIP archive with both local and global headers set to zero could bypass antivirus protection and allow a malicious file to be opened on the target system. PoC/proofs of concept code and advisories (e.g., iDEFENSE CAN references) document det...
RHEL 3 : net-snmp (RHSA-2004:023)
Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...
[RHSA-2003:335-01] Updated Net-SNMP packages fix security and other bugs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Net-SNMP packages fix security and other bugs Advisory ID: RHSA-2003:335-01 Issue date: 2003-12-02 Updated on: 2003-12-02 Product: Red...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2003-0935
Net-SNMP before 5.0.9 is vulnerable to an exposure issue where a user or community can access MIB data that should be restricted. Affected are Net-SNMP components that serve MIB data; the root cause is improper enforcement of MIB view permissions. Impact is data disclosure of restricted MIB objec...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
CVE-2002-0935
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service resource exhaustion via a large number of requests to the server with null characters, which causes the working threads to hang...
CVE-2002-0935
The CVE-2002-0935 issue affects Apache Tomcat 4.0.3 and possibly earlier 4.1.3 beta; it enables remote denial of service through a flood of requests containing null characters, causing server threads to hang due to resource exhaustion. The vulnerability targets the HTTP request handling path, lea...
CVE-2002-0935
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service resource exhaustion via a large number of requests to the server with null characters, which causes the working threads to hang...
Fixed in Apache Tomcat 4.1.3
Important: Denial of service CVE-2002-0935 A malformed HTTP request can cause the request processing thread to become unresponsive. A sequence of such requests will cause all request processing threads, and hence Tomcat as a whole, to become unresponsive. Affects: 4.0.0-4.0.2?, 4.0.3, 4.0.4-4.0.6...
CVE-2001-0935
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550...
CVE-2001-0935
The CVE concerns wu-ftpd up to 2.6.0 (and possibly earlier) with a vulnerability in the ftp globbing code (ftpglob) that can be triggered remotely. OpenVAS and Debian advisories associate CVE-2001-0550 with a remote root issue in wu-ftpd’s glob handling, including references to specific advisorie...
CVE-2000-0935
CVE-2000-0935 affects Samba 2.0.7: the SWAT (Samba Web Administration Tool) CGI log file is vulnerable to a symlink attack that lets local users overwrite arbitrary files. This is a local-privilege context with complete impact on confidentiality and integrity as indicated by the CVSS metrics. Sup...
CVE-2000-0935
Samba Web Administration Tool SWAT in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file...
CVE-1999-0935
Affected software: classifieds.cgi CGI script. Vulnerability: remote command execution by specifying arbitrary commands in a hidden CGI form variable. Root cause: implied lack of proper handling/sanitization of hidden form data (as described in PT-1999-1476 and CVE description). Impact: arbitrary...