PHP 5.3.4 com_event_sink 0-Day

...

Mandrake Linux Security Advisory : perl-Digest-MD5 (MDKSA-2002:035)

A bug exists in the UTF8 interaction between the perl-Digest-MD5 module and perl that results in UTF8 strings having improper MD5 digests. The 2.20 version of the module corrects this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2002-1142

creationtimestamp| type| source ---|---|--- 2012-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19026 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/ms02065msadc.rb 2025-02-06 03:13:37+00:00| seen|...

distcc-cve2004-2687 NSE Script

Detects and exploits a remote code execution vulnerability in the distributed compiler daemon distcc. The vulnerability was disclosed in 2002, but is still present in modern implementation due to poor configuration of the service. Script Arguments cmd the command to run at the remote server...

HP SNMP Agents < 9.0.0 Multiple Vulnerabilities (HPSBMU02771 SSRT100558) (Red Hat)

The version of the HP SNMP Agents package installed on the remote Red Hat Enterprise Linux host is earlier than 9.0.0 and, as such, potentially affected by the following vulnerabilities : - An unspecified cross-site scripting vulnerability exists. CVE-2012-2001 - An unspecified URL redirection...

CVE-2012-2002

HP SNMP Agents for Linux prior to version 9.0.0 are affected by CVE-2012-2002 (open redirect). The vulnerability allows remote attackers to redirect users to arbitrary web sites, enabling phishing-like scenarios. The issue is associated with HP SNMP Agents for Linux

Security Update for Word 2002 (KB895589)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when you open a maliciously modified document. The update resolves this vulnerability so that Word 2002 documents are handled appropriately...

Security Update for Word 2002 (KB887978)

A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when opening a maliciously modified document. This update resolves this vulnerability so that Word documents are handled appropriately...

Microsoft IIS HTTP Internal IP Disclosure

Collect any leaked internal IPs by requesting commonly redirected locations from IIS. CVE-2000-0649 references IIS 5.1 win2k, XP and older. However, in newer servers such as IIS 7+, this occurs when the alternateHostName is not set or misconfigured. Also collects internal IPs leaked from the...

MySQL 3.20.32 - 3.23.52 Weak Default Configuration

The version of MySQL installed on the remote host is 3.20.32 to 3.23.52. On Windows, the default configuration used in these versions is weak : - The database server binds to all network interfaces and can be reached from outside. CVE-2002-1921 - Logging is disabled, attackers will not be detecte...

OpenSSL 0.9.6 CA Basic Constraints Validation Vulnerability

According to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.7. Such versions do not verify the Basic Constraint for some certificates. A remote attacker could perform a man-in-the-middle attack. Details on this weakness are missing. It is related to...

CVE-2002-2436

The Cascading Style Sheets CSS implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a...

CVE-2002-2435

Technical details for CVE-2002-2435 are not provided in the connected documents. Monitor for updates.

CVE-2002-2436

CVE-2002-2436 affects Mozilla's CSS :visited handling in Firefox (pre-4.0), Thunderbird (pre-3.3), and SeaMonkey (pre-2.1). The flaw allows a crafted HTML document to trigger information disclosure about visited pages, constituting a partial confidentiality impact. The vulnerability is described ...

CVE-2002-2437

The CVE-2002-2437 entry describes an information-disclosure flaw in the JavaScript implementation of Mozilla Firefox (before 4.0), Thunderbird (before 3.3), and SeaMonkey (before 2.1). The vulnerability arises from improper restrictions on the values returned by getComputedStyle, enabling remote ...

OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

OpenSSH sshd with ChallengeResponseAuthentication enabled is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS11-038 Microsof...

MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Windows SMB Unchecked Buffer Denial of Service (MS02-045; CVE-2002-0724)

A denial of service vulnerability has been reported in Microsoft Windows SMB service. The vulnerability is due to an error in the way the server handles packet requests sent over SMB. A remote attacker may exploit this vulnerability by sending a specially crafted packet request to an affected...

CVE-2011-2002

CVE-2011-2002 affects the Windows kernel32k driver (win32k.sys) on Windows Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1. The vulnerability stems from improper handling of TrueType font files in kernel-mode; a crafted font can cause a denial of service (system hang) locally. Affected component...