CVE-2003-0310

CVE-2003-0310 affects the eZ Publish web content system, specifically versions

EzPublish Directory XSS Vulnerability

------------------------------------------------------ EzPublish "Directory" XSS Vulnerability ------------------------------------------------------ ------------------------------------------------------ About Ezpublish; ------------------------------------------------------ PHP Based Content...

EZ Publish 2.2 - 'index.php' IMG Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/7616/info A cross-site scripting vulnerability has been reported for eZ publish. Specifically, eZ publish does not sufficiently sanitize user-supplied input supplied to the 'index.php' script. This may allow for theft of cookie-based authentication...

[email protected] Clients Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================= email protected Clients Buffer Overflow Exploit ========================================= / email protected exploit by zillionatsafemode.org 2003/01/07 Credits for the vulnerability go to: SkyLined...

RAZOR advisory: Linux 2.2.xx /proc/<pid>/mem mmap() vulnerability

RAZOR advisory: Linux kernel 2.2.x /proc/pid/mem mmap vulnerability Issue Date : 12/17/2002 Contact : Michal Zalewski [email protected] CVE number : CAN-2002-1380 Topic: A locally exploitable system crash vulnerability is present in the Linux kernel, versions 2.2.x. The system is likely...

Linux Kernel 2.2 - mmap() Local Denial of Service

Linux Kernel 2.2 - mmap Local Denial of Service / source: https://www.securityfocus.com/bid/6420/info A denial of service vulnerability has been discovered in the Linux 2.2 kernel. It has been reported that it is possible for an unprivileged user to cause the kernel to stop responding due to a bu...

[SECURITY] [DSA-210-1] lynx CRLF injection

------------------------------------------------------------------------ Debian Security Advisory DSA-210-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 13, 2002 - ------------------------------------------------------------------------ Package : lynx, lynx-ssl...

CVE-2002-0948

Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes SSI as the web server, via the 1 Name or 2 Email parameters, which are not properly filtered...

CVE-2002-0912

CVE-2002-0912 affects in.uucpd (UUCP server) in Debian GNU/Linux 2.2; long input strings were not terminated properly, enabling remote denial of service (likely via buffer overflow). Debian DSA-129-1 fixes uucp with updated versions 1.06.1-11potato3 (potato) and 1.06.1-18 (woody); OpenVAS notes t...

CVE-2002-0948

Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes SSI as the web server, via the 1 Name or 2 Email parameters, which are not properly filtered...

CVE-2002-0948

The CVE-2002-0948 entry concerns Scripts For Educators MakeBook 2.2 CGI, where the (1) Name and (2) Email parameters are not properly filtered. This allows remote attackers to execute arbitrary scripts as other visitors, or to trigger server-side includes (SSI) with the web server context. The NV...

[SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 137-1 [email protected] http://www.debian.org/security/ Martin Schulze July 30th, 2002 - -------------------------------------------------------------------------- Package : mm Vulnerability...

CVE-2002-0020

Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options...

CVE-2002-0020

CVE-2002-0020 affects the Telnet server in Windows 2000 and Interix 2.2, where a buffer overflow in the handling of protocol options allows a remote attacker to execute arbitrary code. The vulnerability is exploitable remotely, without authentication, via crafted telnet sessions. Advisories refer...

[SECURITY] [DSA-134-1] OpenSSH remote vulnerability

Package : ssh Problem type : remote exploit Debian-specific: no Theo de Raadt announced that the OpenBSD team is working with ISS on a remote exploit for OpenSSH a free implementation of the Secure SHell protocol. They are refusing to provide any details on the vulnerability but instead are...

SSI & CSS execution in MakeBook 2.2

DownBload Security Research Lab Advisory ------------------------------------------------------------------------- Advisory name: SSI & CSS execution in MakeBook 2.2 Advisory number: 5 Application: MakeBook 2.2 CGI script Application author: Kristina Pfaff-Harris Source:...

[SECURITY] [DSA-130-1] memory allocation error in ethereal

Package: ethereal Vulnerability: remotely triggered memory allocation error Debian-specific: no Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal...

CVE-2001-1131

The CVE-2001-1131 entry documents a directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2. The issue allows an attacker to read arbitrary files and directories via a modified dot dot (..) in the CD command, yielding partial confidentiality impact as per the NVD metrics. No specif...

CVE-1999-1481

Squid 2.2.STABLE5 and earlier versions are affected when using external authentication. A newline in the user/password pair can bypass access controls, enabling unauthorized access. The available documents confirm the affected software and the bypass condition but do not provide remediation detai...

CVE-1999-1137

CVE-1999-1137 concerns the /dev/audio device on Solaris 2.2 and earlier and SunOS 4.1.x. Permissions allow any local user to read the device, enabling potential eavesdropping on nearby conversations. Root cause: permissive read access to the audio device; affected components are the legacy Solari...