233 matches found
CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server 1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server...
Dnsmasq TFTP Service 2.40 - 2.49 Multiple Vulnerabilities
Dnsmasq is prone to a remotely exploitable heap-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a...
CVE-2009-2565
Cross-site scripting XSS vulnerability in Perl CGI's By Mrs. Shiromuku shiromukufs6DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2565
CVE-2009-2565 is an XSS vulnerability in shiromuku(fs6)DIARY (Perl CGI by Mrs. Shiromuku). The affected product is shiromuku(fs6)DIARY version 2.40 and earlier. The flaw allows remote attackers to cause the browser to execute arbitrary script or HTML via unspecified vectors; impact is arbitrary s...
CVE-2009-2565
Cross-site scripting XSS vulnerability in Perl CGI's By Mrs. Shiromuku shiromukufs6DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
JVN#31110006 shiromuku(fs6)DIARY cross-site scripting vulnerability
shiromukufs6DIARY from Perl CGI's By Mrs. Shiromuku is a web log software. shiromukufs6DIARY contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information...
CVE-2008-0378
Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long hostname...
CVE-2008-0378
CVE-2008-0378 affects SocksCap 2.40-051231 and earlier. Reported as a stack-based buffer overflow when “Resolve all names remotely” is enabled, allowing remote attackers to crash the application and potentially execute arbitrary code via a long hostname. The vulnerability is documented across mul...
CVE-2004-2503
INweb Mail Server 2.40 is affected. The issue allows remote attackers to cause a denial of service (crash) by a large number of connect/disconnect actions to the POP3 and SMTP services. The provided sources do not detail root cause or a patch; exploitation info is not stated. Remediation details ...
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...
CVE-2002-1457
SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter...
CVE-2002-1457
CVE-2002-1457 targets L-Forum 2.40. It describes a SQL injection in search.php via the search parameter that could allow remote attackers to execute arbitrary SQL statements. The connected documents confirm the affected software (L-Forum 2.40) and the vulnerable component (search.php) with the un...