5356 matches found
CVE-2002-2211
CVE-2002-2211 involves BIND 4 and BIND 8 when resolving recursive DNS queries for arbitrary hosts. The underlying issue is a DNS cache poisoning risk via a birthday attack that leverages a large number of open queries for the same RR combined with spoofed responses, increasing the chance of poiso...
CVE-2002-2212
CVE-2002-2212 affects the DNS resolver in Fujitsu UXP/V. The vulnerability allows remote attackers to perform DNS cache poisoning through a birthday-attack using many concurrent DNS queries and spoofed responses, increasing the chance of a correct spoofed reply more efficiently than brute force. ...
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
PuTTy.exe <= 0.53 (validation) Remote Buffer Overflow Expl (meta)
Exploit for unknown platform in category remote exploits ==================================================================== PuTTy.exe 'PuTTy.exe '$Revision: 1.1 $', 'Authors' = 'y0 at w00t-shell.net' , 'Description' = Pex::Text::Freeformqq This module exploits a buffer overflow in the PuTTY SSH...
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)
PuTTy.exe 0.53 - Validation Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...
Apache chunked encoding buffer overflow
Added: 05/08/2006 CVE: CVE-2002-0392 BID: 5033 OSVDB: 838 Background Apache web servers support chunked encoding, which is used by a web client to send data to the server in parts, or chunks. Problem A flaw in the calculation of the size of chunked encoding leads to a buffer overflow, allowing...
CVE-2006-2002
The CVE-2006-2002 issue affects MyGamingLadder 7.0, specifically the stats.php script. A remote file inclusion flaw allows an attacker to supply a URL via the dir[base] parameter, enabling arbitrary PHP code execution on the server. The vulnerability is rooted in unsafely including user-controlle...
CVE-2006-2002
PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirbase parameter...
CVE-2006-1620
admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is presen...
CVE-2006-1621
Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter...
CVE-2006-1620
admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is presen...
CVE-2002-2210
The CVE-2002-2210 entry concerns OpenOffice 1.0.1, where local users can overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. The root cause is a symlink handling issue that allows a nearby user to redirect writes to a privileged or s...
Microsoft Office 2002 - Excel/Powerpoint/Word.. 10.0.2614.0 => 11.0.5612.0
Full archive at http://www.milw0rm.com/sploits/excel03262006.rar Topic : Microsoft Office 2002 - Excel/Powerpoint/Word.. 10.0.2614.0 = 11.0.5612.0 Date : 02/12/2006 Author : posidron [email protected] Table of Contens ================ - Some Excel Information - The XLS File Format and...
MS Office Products Array Index Bounds Error (unpatched) PoC
Exploit for unknown platform in category dos / poc =========================================================== MS Office Products Array Index Bounds Error unpatched PoC =========================================================== Full archive at http://www.milw0rm.com/sploits/excel03262006.rar Top...
Microsoft Office Products - Array Index Bounds Error (PoC)
Microsoft Office Products - Array Index Bounds Error PoC Full archive at https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1615.rar excel03262006.rar Topic : Microsoft Office 2002 - Excel/Powerpoint/Word.. 10.0.2614.0 = 11.0.5612.0 Date : 02/12/2006 Author :...
Microsoft Office Products - Array Index Bounds Error (PoC)
Full archive at https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1615.rar excel03262006.rar Topic : Microsoft Office 2002 - Excel/Powerpoint/Word.. 10.0.2614.0 = 11.0.5612.0 Date : 02/12/2006 Author : posidron Table of Contens ================ - Some Excel...
CVE-2002-2209
CVE-2002-2209 concerns an unspecified security vulnerability in Baby FTP Server versions before November 7, 2002 . The description provides no details on the root cause, exploit vector, or exact impact, only noting an unknown impact and attack vectors. The NVD entry lists a high base score (10.0)...
Microsoft Commerce Server 2002: Logon as known user with a false password
Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...
CVE-2006-0030
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption...
CVE-2006-0028
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving inval...