PT-2003-2178 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Pedestal Software Integrity Protection Driver IPD versions 1.3 and earlier Description: The issue allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel. This is achieved by using the...

CuteNews 1.3 - Debug Query Information Disclosure

CuteNews 1.3 - Debug Query Information Disclosure source: https://www.securityfocus.com/bid/9130/info An information disclosure weakness has been reported in CuteNews 1.3, that may expose sensitive server configuration data. The problem occurs due to CuteNews accepting a debug query that will...

McNews 1.3 : File Disclosure Vulnerability

The vulnerable script is mcnewsroot/admin/header.php Exploit it with : header.php?voir=1&skinfile=skin/../../../file/to/view...

InstaBoard 1.3 - index.cfm SQL Injection

InstaBoard 1.3 - index.cfm SQL Injection source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the...

InstaBoard 1.3 - 'index.cfm' SQL Injection

source: https://www.securityfocus.com/bid/7338/info It has been reported that multiple input validation errors exist in the index.cfm file included with InstaBoard. Because of this issue, remote attackers may launch SQL injection attacks through the software. The consequences may vary depending o...

CVE-2001-1008

The CVE-2001-1008 entry concerns Java Plugin 1.4 for JRE 1.3, where signed applets can run even if the code-signing certificate is expired. This indicates a vulnerability in how the plugin handles expired certificates, allowing remote attackers to attempt unauthorized activity via an applet signe...

Justice Guestbook 1.3 vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Justice Guestbook 1.3 vulnerabilities product: Justice Guestbook 1.3 vendor: http://www.justice-media.de risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/017.en.txt...

IBM Tivoli Firewall Toolbox contains vulnerability

Overview A vulnerability in the Tivoli Firewall Toolbox version 1.2 has been discovered that can lead to remote unauthorized compromise of the environment with in the firewall system. Description A buffer overflow vulnerability in the communications layer of the Tivoli Firewall Toolbox has been...

[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 220-1 [email protected] http://www.debian.org/security/ Martin Schulze January 2nd, 2003 http://www.debian.org/security/faq -...

CVE-2002-2354

Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service crash or hang via a large number of TCP connection requests...

PT-2002-2620 · Apple · Terminal

Name of the Vulnerable Software and Affected Versions: Terminal versions 1.3 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a "telnet://" link, which is executed by Terminal.app window. This can lead to unauthorized access and execution of...

security flaw

The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service process kill or possibly other behaviors that would not normally be allowed, by modifying the...

TCP flood against NetGear FM114P

Hi! I've got a lot of availability trouble with my NetGear FM114P. After asking the support and no good answer I started doing some test for myself. It seems possible to crash the NetGear FM114P with many TCP connects. I did some tests on my FM114P firmware Version 1.3 Release 05 and these are th...

wp-02-0012: Carello 1.3 Remote File Execution (Updated 1/10/2002)

Westpoint Security Advisory Title: Carello 1.3 Remote File Execution Risk Rating: High Software: Carello Shopping Cart Platforms: Win2k, WinNT Vendor URL: www.carelloweb.com Author: Matt Moore [email protected] Date: 10th July 2002 Advisory ID: wp-02-0012 Revision: Updated 22/02/2002 see...

[ADVISORY]: Arbitrary file disclosure vulnerability in Sympoll 1.2

Sympoll is a customizable voting booth system written in PHP. A missing variable integrity check allows arbitrary files to be viewed on a web server that hosts Sympoll version 1.2. Hosts that have disabled the registerglobals directive in their php.ini file are not at risk. This vulnerability was...

CVE-2002-0683

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. dot dot in the VBEXE parameter...

CVE-2002-0683

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. dot dot in the VBEXE parameter...

DEBIAN-CVE-2002-0392

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

security flaw

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size...

CVE-2001-0888

The CVE-2001-0888 entry concerns Atmel Firmware 1.3 Wireless Access Point (WAP). The vulnerability arises in SNMP handling: sending a request with a non-"public" community string or an unknown OID can cause the WAP to deny subsequent SNMP requests, resulting in a denial of service. The provided s...