8799 matches found
Legendary TXT overflow-vulnerability warning-the black bar safety net
Legendary TXT overflow Six years ago the discovery of the cave,the EXP is now estimated to don't hurt to kill the power,release to primarily meet the noob's curiosity. Basically can also prove Nothing Is Impossible. CVE: CAN-2 0 0 4-0 9 0 1 MST: MS04-0 4 1 Affected component:mswrd632. wpc/mswrd6...
PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000
PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Low Description: By simply requesting the 'remediate.cgi' script omitting certain parameters, the web server returns the physical path of the...
PR07-41: XSS on Juniper Networks Secure Access 2000
PR07-41: XSS on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Medium-high Description: Juniper Networks Secure Access 2000 is vulnerable to a vanilla XSS. Vulnerable server-side script: '/dana-na/auth/rdremediate.cgi'...
Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure
Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure source: https://www.securityfocus.com/bid/28037/info Juniper Networks Secure Access 2000 is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch...
ProCheckUp Security Advisory 2007.41
PR07-41: XSS on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Medium-high Description: Juniper Networks Secure Access 2000 is vulnerable to a vanilla XSS. Vulnerable server-side script: '/dana-na/auth/rdremediate.cgi'...
Juniper Networks Secure Access 2000 Web - Root Full Path Disclosure
source: https://www.securityfocus.com/bid/28037/info Juniper Networks Secure Access 2000 is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks. Secure Access 2000 5.5R1 Build 11711 is vulnerable...
Novell Client nwspool.dll EnumPrinters buffer overflow
Added: 02/22/2008 CVE: CVE-2008-0639 BID: 27741 OSVDB: 41510 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by a buffer overflow in the EnumPrinters function, allowing remote attackers to execute...
Novell Client nwspool.dll EnumPrinters buffer overflow
Added: 02/22/2008 CVE: CVE-2008-0639 BID: 27741 OSVDB: 41510 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by a buffer overflow in the EnumPrinters function, allowing remote attackers to execute...
Novell Client nwspool.dll EnumPrinters buffer overflow
Added: 02/22/2008 CVE: CVE-2008-0639 BID: 27741 OSVDB: 41510 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by a buffer overflow in the EnumPrinters function, allowing remote attackers to execute...
Novell Client nwspool.dll EnumPrinters buffer overflow
Added: 02/22/2008 CVE: CVE-2008-0639 BID: 27741 OSVDB: 41510 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by a buffer overflow in the EnumPrinters function, allowing remote attackers to execute...
phpnukedocum-sql.txt
php-nuke modules Docum remote sql inj Found:DamaR [email protected] Hack Bitti ama Dönmek Yakın Since 2000 -------------------------------------------------------------------------------...
Microsoft Windows活动目录LDAP请求验证远程拒绝服务漏洞(MS08-003)
BUGTRAQ ID: 27638 CVECAN ID: CVE-2008-0088 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的LDAP服务实现上存在漏洞,远程攻击者可能利用此漏洞导致服务不可用。 由于没有正确地验证特制的LDAP请求,Microsoft Windows 2000和Windows Server 2003上的活动目录实现存在拒绝服务漏洞;此外Windows XP和Windows Server 2003上所安装的活动目录应用模式(ADAM)实现也存在这个漏洞。成功利用这个漏洞的攻击者可能导致计算机停止响应并自动重启。...
Microsoft Windows OLE自动化堆溢出漏洞(MS08-008)
BUGTRAQ ID: 27661 CVECAN ID: CVE-2007-0065 Microsoft Windows是微软发布的非常流行的操作系统。 对象链接和嵌入(OLE)自动化处理特制脚本请求的方式存在堆溢出漏洞,如果用户受骗访问了恶意站点的话,就可能触发这个溢出,导致以登录用户的权限对系统进行更改。如果用户以管理权限登录的话,攻击者就可以完全控制受影响的系统。 Microsoft Office 2004 for Mac Microsoft Visual Basic 6.0 SP6 Microsoft Windows XP SP2 Microsoft Windows Vista...
CVE-2003-1544
CVE-2003-1544 affects Terminal Services on Windows 2000 (pre-SP4) and Windows XP. The vulnerability is an unrestricted critical resource lock that allows remote authenticated users to trigger a denial-of-service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from loadi...
Microsoft Security Bulletin MS08-012 - Critical Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085)
Microsoft Security Bulletin MS08-012 - Critical Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution 947085 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves two privately reported vulnerabilities in...
Microsoft Security Bulletin MS08-013 – Critical Vulnerability in Microsoft Office Could Allow Remote Code Execution (947108)
Microsoft Security Bulletin MS08-013 – Critical Vulnerability in Microsoft Office Could Allow Remote Code Execution 947108 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability in Microsoft Office...
CVE-2003-1544: Undefined Security Weakness
Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service reboot by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded...
Microsoft Security Bulletin MS08-005 – Important Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
Microsoft Security Bulletin MS08-005 – Important Vulnerability in Internet Information Services Could Allow Elevation of Privilege 942831 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This important update resolves a privately reported vulnerability in Internet...
CVE-2008-0102: Undefined Security Weakness
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...
CVE-2008-0104: Improper Control of Generation of Code
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...