CVE-2003-0830

CVE-2003-0830 describes a local privilege escalation in marbles (versions up to 1.0.2 and earlier) caused by a buffer overflow when processing the HOME environment variable. The issue allows a local user to gain privileges (e.g., gid 'games' on Debian woody) due to unsafe handling of HOME. Public...

CVE-2002-1454

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...

CVE-2003-0281

CVE-2003-0281 describes a buffer overflow in Firebird 1.0.2 and earlier versions (and possibly other InterBase-based products) that can be triggered by a long INTERBASE environment variable when invoking gds_inet_server, gds_lock_mgr, or gds_drop. The underlying issue allows local users to execut...

Firebird 1.0.2 (FreeBSD 4.7-RELEASE) - Local Privilege Escalation

Firebird 1.0.2 FreeBSD 4.7-RELEASE - Local Privilege Escalation / DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD 4.7-RELEASE This is Proof Of concept code. bash-2.05a$ ./DSR-firebird Firebird-1.0.2 Local exploit for Freebsd 4.7 by - [email protected]...

Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit

Exploit for bsd platform in category local exploits ===================================================== Firebird 1.0.2 FreeBSD 4.7-RELEASE Local Root Exploit ===================================================== / DSR-firebird.c ------------------------------- Tested on: Firebird 1.0.2 FreeBSD...

dsr-adv001.txt

on: attachment; filename="dsr-adv001.txt" -Dtors Security Research- - www.dtors.net - -Package: Firebird1.0.2 FreeBSD -Versions Affected: 1.0.2 -Website: http://firebird.sf.net -Exploit: Local Stack Overflow -Date: 22/03/2003 -Author: [email protected] && [email protected] ---BACKGROUND Firebird is a...

smallftpd's version 1.0.2 Directory Transversal Vulnerability

Smallftpd is a simple and small Ftp server for windows. A vulnerability exists in smallftpd v 1.02http://smallftpd.free.fr/ that allow unauthorizeded users to browse the root directorys and skip access list. CWD .... 250 CWD command successful. also smallftpd v0.99 avaliable to download at...

CVE-2002-1453

Vulnerability: CVE-2002-1453 affects MyWebServer 1.0.2. Issue: Cross-site scripting (XSS) where a long request allows remote attackers to inject script/HTML, which is echoed back to the user in an error message. Impact (as described): Script execution in the context of the user’s browser via the ...

CVE-2002-1453

Cross-site scripting XSS vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message...

CVE-2002-1897

MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service crash via a long HTTP request, possibly triggering a buffer overflow...

kf-1.2.txt

KF Web Server version 1.0.2 shows file and directory content .oO Overview Oo. KF Web Server version 1.0.2 shows file and directory content Discovered on 2002, July, 2nd Vendor: KeyFocus http://www.keyfocus.net/kfws/ KF Web Server 1.0.2 is a free personal web server available for Windows...

Key Focus KF Web Server 1.0.2 - Directory Contents Disclosure

source: https://www.securityfocus.com/bid/5177/info It has been reported that version 1.0.2 of KF Web Server discloses the contents of directories when a certain character is present in the URL. If a remote attacker appends the "%00" character, it will cause the web server to display the contents...

CVE-2001-1100

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page...

CVE-2001-1100

CVE-2001-1100 affects W3Mail 1.0.2 (and possibly other CGI programs). The issue allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the ‘Compose Message’ page. This is a remote command execution vulnerability with network scope and low complexity, but no...

CVE-2001-0591

CVE-2001-0591 is a directory traversal vulnerability in Oracle JSP 1.0.x–1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 that allows remote attackers to read or execute arbitrary .jsp files via a '..' path traversal. The connected Nessus entry confirms the CVE is among Oracle Application Server vulnerab...