3467 matches found
Qpopper .qpopper-options Username Handling Overflow
The remote Qpopper server, according to its banner, is running version 4.0.3 or version 4.0.4. These versions are vulnerable to a buffer overflow if they are configured to allow the processing of a user's /.qpopper-options file. A local user can cause a buffer overflow by setting the 'bulldir'...
Серьёзная ошибка в новом госте ЭЦП!
Уважаемый 3APA3A Благодарю за публикацию в Вашей рассылке моего прошлого письма. Вот сообщение об ещё одной ошибке. В новом варианте российского стандарта электронной цифровой подписи ГОСТ 34.19-2001 вступающем в силу с августа этого года существует серьёзная ошибка, позволяющая сформировать к...
DOS for Icq 2001&2002
Icq2001b & Icq2002a Denial Of Service --------------------------------------------------- If you send a malicious "contact" message, you can freeze target icq. Let's look at the contact packet taken from Massimo Melina documentation contacts-msg content is: contacts number 0xFE uin 0xFE nick 0xFE...
CVE-2001-1229
CVE-2001-1229 affects Icecast before 1.3.9 and libshout before 1.0.4. A remote attacker can trigger a buffer/stack overflow to crash the server or execute arbitrary code. OpenVAS entries confirm a remote overflow in Icecast/libshout; recommended remediation is upgrading Icecast to at least 1.3.9 ...
CVE-2001-1229
Buffer overflows in 1 Icecast before 1.3.9 and 2 libshout before 1.0.4 allow remote attackers to cause a denial of service crash and execute arbitrary code...
CVE-2001-1230
CVE-2001-1230 affects Icecast before 1.3.10. The OpenVAS/NVD data describe a remote buffer overflow in Icecast that allows a remote attacker to crash the server and potentially execute arbitrary code with the server’s privileges. Several advisories (e.g., Debian DSA-089-1/DSA-089-2) and OpenVAS p...
CVE-2001-1228
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server...
CVE-2001-1228
CVE-2001-1228 describes buffer overflows in gzip (notably versions from 1.2.4 and 1.3x and other releases) that could allow code execution via a long filename, potentially when gzip is used on an FTP server. Connected documents corroborate the vulnerability and point to advisories (e.g., Debian D...
CVE-2001-1175
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing...
CVE-2001-1165
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool...
CVE-2001-1174
Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header...
Netwin Surge FTP Server does not adequately validate user input thereby allowing directory traversal
Overview Surge FTP Server 2.0a contains a directory traversal vulnerability. Description Surge FTP Server 2.0a allows remote users to list files outside the FTP root directory. --- Impact Attackers may list files from directories to which access was not granted. --- Solution Upgrade to version...
CVE-2001-1222
Plesk Server Administrator PSA 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain...
CVE-2001-1125
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site...
CVE-2001-1093
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument...
CVE-2001-1202
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error...
CVE-2001-1184
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service CPU consumption via 1 in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and 2 in 2.21.0...
CVE-2001-1131
Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... modified dot dot in the CD command...
CVE-2001-1151
Trend Micro OfficeScan Corporate Edition aka Virus Buster 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password...