3089 matches found
DEBIAN-CVE-2005-0535
Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...
CVE-2004-0940
Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI XSSI documents that trigger a length calculation error...
[SA13330] IberAgents Clear Text User Credential Disclosure
TITLE: IberAgents Clear Text User Credential Disclosure SECUNIA ADVISORY ID: SA13330 VERIFY ADVISORY: http://secunia.com/advisories/13330/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IberAgents 1.x http://secunia.com/product/4336/ DESCRIPTION: A...
Soldier of Fortune II <= 1.3 Server/Client Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
Soldier of Fortune II <= 1.3 Server/Client Denial of Service Exploit
Exploit for unknown platform in category dos / poc ==================================================================== Soldier of Fortune II include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous...
GLSA-200411-03 : Apache 1.3: Buffer overflow vulnerability in mod_include
The remote host is affected by the vulnerability described in GLSA-200411-03 Apache 1.3: Buffer overflow vulnerability in modinclude A possible buffer overflow exists in the gettag function of modinclude.c. Impact : If Server Side Includes SSI are enabled, a local attacker may be able to run...
CVE-2004-0940
Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI XSSI documents that trigger a length calculation error...
Apache 1.3.x mod_include - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/11471/info The problem presents itself when the affected module attempts to parse modinclude-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying them into finite buffers facilitates the overflow. ...
GLSA-200406-16 : Apache 1.3: Buffer overflow in mod_proxy
The remote host is affected by the vulnerability described in GLSA-200406-16 Apache 1.3: Buffer overflow in modproxy A bug in the proxyutil.c file may lead to a remote buffer overflow. To trigger the vulnerability an attacker would have to get modproxy to connect to a malicous server which return...
Solaris 7 (sparc) : 107885-09
CDE 1.3: dtprintinfo Patch. Date this patch was last updated by Sun : Dec/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
Cross Site Scripting in Moodle < 1.3
Cross Site Scripting in Moodle 1.3 ==================================== 2004-04-30 01 Author: author: Bartek Nowotarski silence location: Trzebinia, Poland mail: silence10atwpdotpl site: silencedot0dotpl 02 Discussion: "Moodle is a course management system CMS - a software package designed to hel...
CVE-2003-0993
modaccess in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions...
CVE-2004-0359
Cross-site scripting XSS vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the 1 c, 2 f, 3 showtopic, 4 showuser, or 5 username parameters...
PT-2003-2178 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: Pedestal Software Integrity Protection Driver IPD versions 1.3 and earlier Description: The issue allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel. This is achieved by using the...
CuteNews 1.3 - Debug Query Information Disclosure
CuteNews 1.3 - Debug Query Information Disclosure source: https://www.securityfocus.com/bid/9130/info An information disclosure weakness has been reported in CuteNews 1.3, that may expose sensitive server configuration data. The problem occurs due to CuteNews accepting a debug query that will...
McNews 1.3 : File Disclosure Vulnerability
The vulnerable script is mcnewsroot/admin/header.php Exploit it with : header.php?voir=1&skinfile=skin/../../../file/to/view...
InstaBoard 1.3 - index.cfm SQL Injection
InstaBoard 1.3 - index.cfm SQL Injection source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the...
InstaBoard 1.3 - 'index.cfm' SQL Injection
source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the software. The consequences may vary depending o...
CVE-2001-1008
The CVE-2001-1008 entry concerns Java Plugin 1.4 for JRE 1.3, where signed applets can run even if the code-signing certificate is expired. This indicates a vulnerability in how the plugin handles expired certificates, allowing remote attackers to attempt unauthorized activity via an applet signe...
CVE-2001-1008: Undefined Security Weakness
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate...