CVE-2002-0097

CVE-2002-0097 affects Geeklog 1.3, where remote attackers can hijack user accounts (including the administrator) by modifying a user’s permanent cookie UID to the target account. The root cause is manipulating the UID in the persistent cookie to assume another user’s session. The available connec...

security flaw

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

CVE-2001-0738

The CVE-2001-0738 issue affects the Linux kernel logging daemon klogd (sysklogd 1.3) across various distributions. A NULL byte in log messages can cause klogd to enter an infinite loop and hang, effectively a denial-of-service. Root cause cited is klogd’s LogLine handling of NULL bytes in input. ...

CVE-2001-0804

CVE-2001-0804 affects Interactive Story prior to version 1.4, via a directory traversal in story.pl. The vulnerability allows remote attackers to read arbitrary server files by manipulating the next parameter (e.g., ..\ or ../../.. paths). Exploitation details from the Nessus plugin show requests...

[SECURITY] [DSA-106-1] rsync remote exploit

Package : rsync Problem type : remote exploit Debian-specific: no Sebastian Krahmer found several places in rsync a popular tool to synchronise files between machines where signed and unsigned numbers were mixed which resulted in insecure code. This could be abused by remote users to write 0-byte...

QDAV-2001-7-3

Interactive Story File Disclosure Vulnerability qDefense Advisory Number QDAV-2001-7-3 Product: Interactive Story Vendor: Valerie Mates http://www.valeriemates.com Severity: Remote; Attacker may read arbitrary file Versions Affected: Version 1.3 Vendor Status: Vendor contacted; has released new...

Interactive Story File Disclosure Vulnerability

Interactive Story File Disclosure Vulnerability qDefense Advisory Number QDAV-2001-7-3 Product: Interactive Story Vendor: Valerie Mates http://www.valeriemates.com Severity: Remote; Attacker may read arbitrary file Versions Affected: Version 1.3 Vendor Status: Vendor contacted; has released new...

[SECURITY] [DSA-060-1] fetchmail buffer overflow

Package : fetchmail Problem type : buffer overflow Debian-specific: no Wolfram Kleff found a problem in fetchmail: it would crash when processing emails with extremely long headers. The problem was a buffer overflow in the header parser which could be exploited. This has been fixed in version...

CVE-2001-0262

CVE-2001-0262 is a historical buffer overflow in Netscape SmartDownload 1.3. The vulnerability resides in the sdph20.dll URL parser: it reserves 256 chars for a URL on the stack but can overflow when URLs longer than that are copied, allowing remote code execution as the logged-in user. Affected ...

Netscape SmartDownload 1.3 Buffer Overflow Vulnerability

--------------------------------------------------------------------------- Security Alert Subject: Netscape SmartDownload 1.3 Buffer Overflow Vulnerability BUGTRAQ ID: 2615 CVE ID: CAN-2001-0262 Published: April 13, 2001 Updated: April 18, 2001 Remote: Yes Local: No Class: Boundary Condition Err...

CVE-2001-0271

CVE-2001-0271 affects mailnews.cgi (version 1.3 and earlier). The vulnerability allows remote attackers to execute arbitrary commands by supplying a user name that contains shell metacharacters. This is a remote command-execution flaw with high impact (complete confidentiality, integrity, and ava...

conceal.1.3x.txt

Date: Thu, 4 Mar 1999 14:11:47 -0600 From: [email protected] To: [email protected] Subject: S9S ConSeal PC FIREWALL for Windows NT Security Update Just got this from Signal9. [email protected] on 03/04/99 11:41:12 AM To: [email protected] cc: bcc: Bill...

PT-1997-1115 · Ncsa · Ncsa Http Daemon

Name of the Vulnerable Software and Affected Versions: NCSA HTTP daemon version 1.3 Description: A buffer overflow issue in the NCSA HTTP daemon allows remote command execution. Recommendations: For version 1.3, update to a newer version that contains a fix for this issue...

: Multiples vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer

Advisory ID Internal CORE-2006-0322 Advisory Information Advisory ID : CORE-2006-0322 Bugtraq ID : 19900 CVE Name : CVE-2006-4660 / CVE-2006-4661 Title : Multiples vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer Class : Access Validation Error/Design Error, Input validation error Remotel...