Lucene search
+L

235 matches found

Saint
Saint
added 2007/03/16 12:00 a.m.78 views

NetMail WebAdmin username buffer overflow

Added: 03/16/2007 CVE: CVE-2007-1350 BID: 22857 OSVDB: 33886 Background Novell NetMail WebAdmin is a web-based administration interface which runs an HTTP server on port 89/TCP. Problem A buffer overflow vulnerability in Novell NetMail WebAdmin allows remote attackers to execute arbitrary command...

6.8CVSS7.8AI score0.19398EPSS
SaveExploits5
Saint
Saint
added 2007/03/16 12:00 a.m.87 views

NetMail WebAdmin username buffer overflow

Added: 03/16/2007 CVE: CVE-2007-1350 BID: 22857 OSVDB: 33886 Background Novell NetMail WebAdmin is a web-based administration interface which runs an HTTP server on port 89/TCP. Problem A buffer overflow vulnerability in Novell NetMail WebAdmin allows remote attackers to execute arbitrary command...

6.8CVSS7.8AI score0.19398EPSS
SaveExploits5
Check Point Advisories
Check Point Advisories
added 2007/03/11 12:00 a.m.39 views

Novell NetMail WebAdmin Username Stack Buffer Overflow (CVE-2007-1350)

Novell NetMail is an electronic mail server product that supports various email access and exchange protocols, including IMAP Internet Message Access Protocol and NMAP Network Messaging Application Protocol.WebAdmin is a browser based administrative tool used to manage NetMail...

6.8CVSS6.3AI score0.19398EPSS
SaveExploits5
canvas
canvas
added 2007/03/08 10:19 p.m.46 views

Immunity Canvas: NETMAIL_WEBADMIN

Name| netmailwebadmin ---|--- CVE| CVE-2007-1350 Exploit Pack| CANVAS Description| Novell Netmail WebAdmin Overflow Notes| CVE Name: CVE-2007-1350 VENDOR: Novell VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-07-009.html CVE Url:...

6.8CVSS1.5AI score0.19398EPSS
SaveExploits5
Cvelist
Cvelist
added 2006/03/22 1:00 a.m.28 views

CVE-2006-1350

PHP remote file include vulnerability in index.php in 99Articles.com aka ArticlesOne.com Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter...

7.4AI score0.01806EPSS
SaveExploits0References8
CVE
CVE
added 2006/03/22 1:00 a.m.79 views

CVE-2006-1350

The CVE-2006-1350 entry is supported by multiple connected sources detailing a remote file include (RFI) flaw in Free Articles Directory (a PHP CMS). The vulnerability occurs because index.php fails to sanitize the page parameter, allowing an unauthenticated attacker to include and execute arbitr...

7.5CVSS7.4AI score0.01806EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2005/01/19 5:00 a.m.33 views

CVE-2004-1350

Multiple buffer overflows in Sun Java System Web Proxy Server formerly Sun ONE Proxy Server 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests...

8AI score0.07663EPSS
SaveExploits0References10
CVE
CVE
added 2005/01/19 5:00 a.m.64 views

CVE-2004-1350

Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6–3.6 SP4 contains multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. The issue affects the proxy server’s handling of input in its network-facing compon...

7.5CVSS8.4AI score0.07663EPSS
SaveExploits0References10Affected Software1
Tenable Nessus
Tenable Nessus
added 2004/09/29 12:00 a.m.26 views

Debian DSA-206-1 : tcpdump - denial of service

The BGP decoding routines for tcpdump used incorrect bounds checking when copying data. This could be abused by introducing malicious traffic on a sniffed network for a denial of service attack against tcpdump, or possibly even remote code execution. %NASLMINLEVEL 70300 C Tenable Network Security...

7.5CVSS6AI score0.02367EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2004/09/01 4:00 a.m.47 views

CVE-2002-1350

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service application crash...

6.3AI score0.02367EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2004/09/01 4:00 a.m.34 views

CVE-2001-1350

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...

6.9AI score0.02053EPSS
SaveExploits0References2
CVE
CVE
added 2004/09/01 4:00 a.m.93 views

CVE-2002-1350

CVE-2002-1350 affects tcpdump: the BGP decoding routines in tcpdump 3.6.x before 3.7 do not copy data correctly, allowing remote attackers to trigger a denial of service (application crash). The issue arises from incorrect bounds checking when copying BGP data. Vulnerable product is tcpdump; affe...

7.5CVSS6.3AI score0.02367EPSS
SaveExploits0References10Affected Software1
NVD
NVD
added 2003/12/31 5:00 a.m.14 views

CVE-2003-1350

List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" pipe, which is used as a field delimiter, into the bannerurl field...

4.3CVSS6.6AI score0.02082EPSS
SaveExploits2References4
NVD
NVD
added 2001/11/25 5:00 a.m.24 views

CVE-2001-1350

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...

7.5CVSS6.9AI score0.02053EPSS
SaveExploits0References2
CVE
CVE
added 2001/09/12 4:00 a.m.61 views

CVE-1999-1350

CVE-1999-1350 relates to ARCAD Systemhaus 0.078-5, where critical programs and files were installed with world-writeable permissions. This local issue could let an unprivileged user gain privileges by replacing a legitimate program with a Trojan horse. The available sources describe the vulnerabi...

4.6CVSS7AI score0.00312EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder