CVE-2003-1537

CVE-2003-1537 is a directory traversal vulnerability affecting PostNuke 0.723 and earlier. The issue allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php. Connected sources corroborate the vulnerability description across NVD/Red Hat CVE records ...

CVE-2007-5667

NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the .\nwfilter device available for arbitrary user-mode input via METHODNEITHER IOCTLs, which allows local users to gain privileges by passing a kernel address as an argument and overwriting kernel...

Microsoft Security Bulletin MS07-061 – Critical Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460)

Microsoft Security Bulletin MS07-061 – Critical Vulnerability in Windows URI Handling Could Allow Remote Code Execution 943460 Published: November 13, 2007 Version: 1.0 General Information Executive Summary This update resolves a publicly reported vulnerability. A remote code execution...

VulnCheck KEV: CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox,...

EMC NetWorker Remote Exec service subcmd buffer overflow

Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...

EMC NetWorker Remote Exec service subcmd buffer overflow

Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...

EMC NetWorker Remote Exec service subcmd buffer overflow

Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...

CVE-2003-1530

The CVE-2003-1530 entry affects phpBB up to version 2.0.3 and earlier, where the vulnerability resides in privmsg.php. The underlying issue is an SQL injection via the mark[] parameter, enabling remote attackers to execute arbitrary SQL commands. The available documents do not specify exact affec...

CVE-2003-1529

Vulnerability summary (CVE-2003-1529). The J Walk Application Server from Seagull Software Systems (versions 3.2C9 and earlier than 3.3c4) is vulnerable to an encoded directory traversal. An attacker can read arbitrary files by supplying a URL with an encoded dot-dot sequence (".%252e"), enabling...

CVE-2003-1534

The CVE-2003-1534 entry concerns Justice Guestbook 1.3, specifically the jgb.php3 CGI. The vulnerability is a Cross‑Site Scripting (XSS) flaw triggered by user-supplied input in multiple fields (name, homepage, aim, yim, location, comment), with the underlying cause being insufficient input valid...

CVE-2003-1535

Justice Guestbook 1.3 contains a path disclosure vulnerability: a direct request to cfooter.php3 leaks the full installation path in an error message. The affected component is the Justice Guestbook CGI (cfooter.php3) and the root cause is improper handling of error messages that reveal filesyste...

CVE-2003-1531

CVE-2003-1531 corresponds to a cross-site scripting (XSS) vulnerability in the Ceilidh testcgi.exe CGI used by Lilikoi Software Ceilidh versions 2.70 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the query string in /cgi-bin/testcgi.exe. Connected sourc...

CVE-2003-1533

CVE-2003-1533 affects PhpPass 2, where accesscontrol.php is vulnerable to SQL injection via the uid and pwd parameters. The underlying issue allows remote attackers to craft inputs that alter SQL queries, enabling arbitrary SQL execution. Documented impact indicates potential enablement of unauth...

CVE-2003-1528

CVE-2003-1528 affects Fujitsu Siemens NetWorker 6.0. The vulnerability is due to a symlink attack on the nsrsh[PID] temporary file, enabling a local attacker to overwrite arbitrary files. Root cause: insecure handling of temporary files used by nsr_shutdown leading to arbitrary file overwrite. Im...

Lotus Domino IMAP mailbox name buffer overflow

Added: 11/02/2007 CVE: CVE-2007-3510 BID: 26176 OSVDB: 40953 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in Lotus Domino could allow a remote, authenticated attacker to execute arbitrary commands by sending ...

Lotus Domino IMAP mailbox name buffer overflow

Added: 11/02/2007 CVE: CVE-2007-3510 BID: 26176 OSVDB: 40953 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in Lotus Domino could allow a remote, authenticated attacker to execute arbitrary commands by sending ...

BrightStor ARCserve Backup LGServer rxrLogin buffer overflow

Added: 11/01/2007 CVE: CVE-2007-5003 BID: 24348 OSVDB: 41353 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in the rxrLogin function allows remote...

BrightStor ARCserve Backup LGServer rxrLogin buffer overflow

Added: 11/01/2007 CVE: CVE-2007-5003 BID: 24348 OSVDB: 41353 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in the rxrLogin function allows remote...

BrightStor ARCserve Backup LGServer rxrLogin buffer overflow

Added: 11/01/2007 CVE: CVE-2007-5003 BID: 24348 OSVDB: 41353 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in the rxrLogin function allows remote...

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com...