Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Exchange 2000 Exhaust CPU Resources (Q320436)

Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources Q320436 SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell Netbasic Scripting Server Directory Traversal

Novell Netbasic Scripting Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MUP overlong request kernel overflow Patch (Q311967)

Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced...

MSDTC denial of service by flooding with nul bytes

It was possible to crash the MSDTC service by sending 20200 nul bytes. OpenVAS Vulnerability Test $Id: msdtcdos.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MSDTC denial of service by flooding with nul bytes Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is fr...

Xerver DoS Vulnerability (CVE-2002-0448) - Active Check

Xerver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:xerver:xerver";...

MondoSoft MondoSearch < 4.4.5156 'msmmask.exe' Source Disclosure Vulnerability - Active Check

MondoSoft MondoSearch is prone to a source code disclosure vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Debugger flaw can Lead to Elevated Privileges (Q320206)

Authentication Flaw in Windows Debugger can Lead to Elevated Privileges Q320206 SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle 9i Application Server Globals.jsa Access Information Disclosure Vulnerability - Active Check

In the default configuration of Oracle 9i Application Server AS, it is possible to make requests for the globals.jsa file for a given web application. These files should not be returned by the server as they often contain sensitive information. SPDX-FileCopyrightText: 2002 Matt Moore Some text...

admin.cgi overflow

The Shoutcast server crashes when a too long argument is given to admin.cgi SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ICECast AVLlib remote buffer overflow

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.12. This version is affected by a remote buffer overflow because it does not properly check bounds of data send from clients. As a result of this vulnerability, it is possible for a...

CWmail.exe Information Disclosure / Privilege Escalation Vulnerability

The CWMail.exe exists on this webserver. Some versions of this file are vulnerable to remote exploit. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

WM_TIMER Message Handler Privilege Elevation (Q328310)

A security issue has been identified in WMTIMER that could allow an attacker to compromise a computer running Microsoft Windows and gain complete control over it. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Cyrus IMAP pre-login buffer overflow

According to its banner, the remote Cyrus IMAP server is vulnerable to a pre-login buffer overrun. SPDX-FileCopyrightText: 2002 Paul Johnston, Westpoint Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BlackIce DoS (ping flood)

It was possible to crash the remote machine by flooding it with 10 KB ping packets. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only TBD : eEyes...

XML Core Services patch (Q318203)

XMLHTTP Control Can Allow Access to Local Files. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unchecked Buffer in Windows Help (Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2002-2124

The CVE-2002-2124 entry concerns nylon 0.2. The vulnerability arises in the recvn and sendn functions which do not handle a recv() returning 0, allowing a remote attacker to trigger a denial of service (infinite loop and high CPU usage) by closing the connection during recv. The connected records...

ASP-Nuke伪造Cookie导致信息泄露漏洞

BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...

CVE-2002-2123

The CVE-2002-2123 entry concerns Gallery 1.3.2’s publish_xp_docs.php PHP remote file inclusion vulnerability. An attacker can specify a URL to an init.php in the GALLERY_BASEDIR parameter, enabling arbitrary PHP code execution on the affected system. The affected software/function is publish_xp_d...