PT-2004-1772 · Samba +1 · Samba +1

Name of the Vulnerable Software and Affected Versions: Samba versions 2.2.x through 2.2.9 Samba versions 3.0.0 through 3.0.4 Description: A buffer overflow issue exists when the mangling method = hash option is enabled in smb.conf. The impact and attack vectors of this issue are not specified. Th...

Fedora Core 2 : ethereal-0.10.3-2.2 (2004-172)

These new packages fix a bug in the last errata where the actual security patch didn't get applied. All users of ethereal are strongly recommended to update to these latest packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Isoqlog-2.2-Beta buffer overflow

+----- Software -----+ Isoqlog is an MTA log analysis program written in C . it designed to scan qmail, postfix, sendmail, exim logfile and produce usage statistics in HTML format. for viewing through a browser. It produces Top domains output according to Incoming , Outgoing , total mails and...

PT-2004-1331 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python versions 2.2 through 2.2.1 Description: A buffer overflow issue exists in the getaddrinfo function when IPv6 support is disabled, allowing remote attackers to execute arbitrary code via an IPv6 address obtained using DNS...

DSA-427 linux-kernel-2.4.17-mips+mipsel - missing boundary check

Bulletin has no description...

osCommerce SQL Injection && DoS && Cross Site Scripting

Vendor : osCommerce URL : http://www.oscommerce.com Version : osCommerce 2.2-MS1 / osCommerce 2.2-MS2 Risk : SQL Injection Vulnerability & XSS in MS1 And Denial Of Service to users in MS1 & MS2 Description: osCommerce is an online shop e-commerce solution under on going development by the open...

osCommerce 2.2 - products_id SQL Injection

osCommerce 2.2 - productsid SQL Injection source: https://www.securityfocus.com/bid/9275/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. It has been reported that an attacker may...

osCommerce 2.2 - manufacturers_id Cross-Site Scripting

osCommerce 2.2 - manufacturersid Cross-Site Scripting source: https://www.securityfocus.com/bid/9277/info A vulnerability has been reported to exist in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of...

osCommerce 2.2 - osCsid Cross-Site Scripting

osCommerce 2.2 - osCsid Cross-Site Scripting source: https://www.securityfocus.com/bid/9238/info It has been reported that osCommerce may be prone to a cross-site scripting vulnerability that may allow an attacker to construct a malicious link containing HTML or script code that may be rendered i...

osCommerce 2.2 - SQL Injection

!/usr/bin/perl source: https://www.securityfocus.com/bid/9211/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. The script in question is used to verify account details during the ne...

CommerceSQL Shopping Cart 2.2 - index.cgi Directory Traversal

CommerceSQL Shopping Cart 2.2 - index.cgi Directory Traversal source: https://www.securityfocus.com/bid/9094/info It has been reported that CommerceSQL may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself...

Winace UnAce 2.2 - Command Line Argument Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/9002/info UnAce has been reported to be prone to a buffer overflow vulnerability. The issue presents itself when UnAce handles ace filenames that are of excessive length. When this filename is passed to the UnAce utility as an argument, the string is...

eMule 2.2 [0.29c] - Web Control Panel - DOS(Denial Of Service)

eMule 2.2 0.29c - Web Control Panel - DOSDenial Of Service Discovered by Rafel Ivgi ,The-Insider http://theinsider.deep-ice.com Emule opens a remote login at port 80. the http login has been carefully tested and was not found to be vulnerable to XSSCross Site Scripting. HowEver It has...

CVE-2003-0636

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites...

CVE-2003-0637

Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing...

CVE-2003-0639

Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication...

CVE-2003-0635

Novell iChain 2.2 before Support Pack 1 is listed as vulnerable, with unknown impact and potentially related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM. The available records do not disclose the root cause, real-world exploit scenarios, or a confirmed impact. Details across connect...

CVE-2003-0310

Cross-site scripting XSS vulnerability in articleview.php for eZ publish 2.2 allows remote attackers to insert arbitrary web script...

PT-2003-1574 · Port80 · Iisprotect

Name of the Vulnerable Software and Affected Versions: iisPROTECT versions 2.2-r4 and earlier Description: The issue allows remote attackers to insert arbitrary SQL and execute code via certain variables, such as the GroupName variable in the SiteAdmin.ASP page. This can be exploited by attackers...

Remote PC Access Server 2.2 Vulnerability

Dear Bugtraq Here is a full details information about the vulnerability of Remote PC Access Server 2.2, taken from our advisory includes the exploit code: http://www.ytech.co.il/advisories/rpca/rpcaccess.htm Best Regards, Yaron Tal YTECH.CO.IL -----------------------------------------------------...