126 matches found
Novell Messenger Server 2.0 - 'Accept-Language' Remote Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Novell Messenger Server 2.0 Accept-Language Overflow
This module exploits a stack buffer overflow in Novell GroupWise Messenger Server v2.0. This flaw is triggered by any HTTP request with an Accept-Language header greater than 16 bytes. To overwrite the return address on the stack, we must first pass a memcpy operation that uses pointers we supply...
CVE-2006-0992
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the...
CVE-2006-0992
CVE-2006-0992 is a stack-based buffer overflow in Novell GroupWise Messenger Server v2.0 (Public Beta 2) triggered by an Accept-Language HTTP header longer than 16 bytes, allowing unauthenticated remote code execution with SYSTEM privileges. The vulnerability stems from an overflow when processin...
security flaw
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...
CVE-2005-0992
Cross-site scripting XSS vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter...
CVE-2005-0992
Summary: CVE-2005-0992 is an XSS in phpMyAdmin’s index.php via the convcharset parameter. The NVD entry lists a base score of 4.3 (MEDIUM) with network access, no confidentiality impact, but partial integrity impact and no availability impact. Connected OpenVAS entries tie the vulnerability to ph...
Cross-Site Scripting vulnerability
PMASA-2005-3 Announcement-ID: PMASA-2005-3 Date: 2005-04-03 Summary Cross-Site Scripting vulnerability Description We received a security advisory from Oriol Torrent Santiago and we wish to thank him for his work and report. The convcharset parameter was not correctly validated, opening the door ...
CVE-2004-0992
Format string vulnerability in the -a option daemon mode in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer...
CVE-2004-0992
The CVE-2004-0992 issue affects Proxytunnel prior to 1.2.3. In daemon mode (-a), it formats log messages for invalid proxy answers, creating a format string vulnerability that could allow remote code execution on the tunneling host. Affected product: Proxytunnel; root cause: unsafe format string ...
CVE-2004-0992
Format string vulnerability in the -a option daemon mode in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer...
CVE-2004-0175
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...
CVE-2003-0992
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
CVE-2003-0992
CVE-2003-0992 is a documented cross-site scripting vulnerability in Mailman’s create CGI script, exploitable to steal cookies of other users. Affected versions are Mailman 2.1.x before 2.1.3; the issue is fixed in later releases (e.g., patches included in 2.1.3 and newer). The linked OpenVAS/Ness...
CVE-2003-0992
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
CVE-2002-0992
Unknown vulnerability in IPV6 functionality for DCE daemons 1 dced or 2 rpcd on HP-UX 11.11 allows attackers to cause a denial of service crash via an attack that modifies internal data...
CVE-2002-0992
The CVE-2002-0992 entry describes an unknown vulnerability in the IPV6 functionality of DCE daemons (dced and rpcd) on HP-UX 11.11. The issue allows an attacker to cause a denial of service (crash) by performing an attack that modifies internal data. The connected documents confirm the affected c...
CVE-2002-0992
Unknown vulnerability in IPV6 functionality for DCE daemons 1 dced or 2 rpcd on HP-UX 11.11 allows attackers to cause a denial of service crash via an attack that modifies internal data...
CVE-2001-0992
ShopPlus CGI (shopplus.cgi) in the ShopPlus shopping cart is vulnerable to remote arbitrary command execution via shell metacharacters in the file parameter. The issue allows execution with the web server’s privileges, with CVSS base score 7.5 (HIGH) and network attack vector with no authenticati...