CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow

The CA BrightStor ARCserve Backup ActiveX control ListCtrl.ocx is vulnerable to a stack-based buffer overflow. By passing an overly long argument to the AddColumn method, a remote attacker could overflow a buffer and execute arbitrary code on the system. This module requires Metasploit:...

CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability

Title: CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability CVE: CVE-2008-1472 CA Advisory Date: 2008-03-28 Reported By: Exploit code posted at milw0rm.com Impact: A remote attacker can cause a denial of service or execute arbitrary code. Summary: CA products that...

DSquare Exploit Pack: D2SEC_CALISTCTRL

Name| d2seccalistctrl ---|--- CVE| CVE-2008-1472 Exploit Pack| D2ExploitPack Description| CA BrightStor ListCtrl ActiveX Stack Overflow Notes|...

CVE-2008-1472

CVE-2008-1472 corresponds to a stack-based buffer overflow in the CA BrightStor ARCserve Backup ListCtrl.ocx ActiveX control (AddColumn method). The vulnerability can be triggered remotely by sending a too-long argument to AddColumn, potentially allowing arbitrary code execution or a denial-of-se...

CVE-2008-1472

creationtimestamp| type| source ---|---|--- 2008-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5264 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16577 2018-05-29 15:50:33+00:00| seen|...

Debian Security Advisory DSA 1472-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1472-1. OpenVAS Vulnerability Test $Id: deb14721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1472-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2003-1472

The CVE-2003-1472 entry describes a buffer overflow in the 3D-FTP client 4.0. The vulnerability is triggered by a long banner sent by a remote FTP server over the network, leading to a denial of service (crash) and potentially arbitrary code execution. The available records consistently identify ...

CVE-2007-1472

CVE-2007-1472 affects Groupit 2.00b5: a variable overwrite vulnerability in groupit.start.inc allows remote inclusion and arbitrary PHP execution by arguments written to $_GLOBALS. Exploitation demonstrated via c_basepath URL parameter to content.php, userprofile.php, password.php, dispatch.php, ...

CVE-2006-1472

CVE-2006-1472 concerns the AFP server in Apple Mac OS X 10.3.9, where the search feature can disclose names of files and folders to users without authorization. The issue is an information disclosure vulnerability in the AFP service when file sharing is enabled, allowing unauthorized users to see...

CVE-2005-1472

CVE-2005-1472 affects Apple Mac OS X 10.4.1. Affected component: system call permission checks for certain directories. The issue allows local users to list files in directories that lack POSIX read permission but have execute bits set for group/other, due to insufficient enforcement of directory...

CVE-2001-1472

The CVE-2001-1472 entry describes a SQL injection in phpBB 1.4.0/1.4.1 through prefs.php via the viewemail parameter. This allows remote authenticated users to execute arbitrary SQL commands and gain administrative access. Affected: phpBB 1.4.0 and 1.4.1; vulnerability originates from the handlin...

CVE-2004-1472

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R with firmware older than 1.63 are vulnerable to a remote denial of service (device freeze) via a fast UDP port scan on the WAN interface. The available sources confirm the affected models and firmware range but do not provide addition...

CVE-2004-1472

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service device freeze via a fast UDP port scan on the WAN interface...

CVE-2002-1472

CVE-2002-1472 describes an untrusted search path vulnerability in XFree86’s libX11.so used by setuid/setgid programs. A local attacker can leverage a modified LD_PRELOAD to point to a malicious module and gain root privileges; impact is local privilege escalation. The vulnerability is associated ...

StrongHold Web Server Detection

Binary data 1472.prm...

CVE-1999-1472

This CVE (CVE-1999-1472) affects Internet Explorer 4.0. The vulnerability allows a remote attacker to read arbitrary text and HTML files on the user’s machine by delivering a small IFRAME that uses Dynamic HTML (DHTML) to exfiltrate data (the Freiburg text-viewing issue). The connected records co...

CVE-2001-1472

SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter...