TelCondex Simple Webserver Buffer Overflow

The TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. OpenVAS Vulnerability Test $Id: telcondex.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: TelCondex Simple Webserver Buffer Overflow...

PuTTY window title escape character arbitrary command execution

PuTTY is a free SSH client. This version contains a flaw that may allow a malicious user to insert arbitrary commands and execute them. The issue is triggered when an attacker sends commands, preceded by terminal emulator escape sequences. It is possible that the flaw may allow arbitrary code...

TinyWeb 1.9

The remote host is running TinyWeb version 1.9 or older. A remote user can issue an HTTP GET request for /cgi-bin/.%00./dddd.html and cause the server consume large amounts of CPU time 88%-92%. OpenVAS Vulnerability Test $Id: tinyweb.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TinyWeb 1....

Apache HTTP Server 'mod_access' Rule Bypass Vulnerability

The target is running an Apache web server that may not properly handle access controls. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

Monkey HTTP Server < 0.6.2 DoS Vulnerability

Monkey HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NIPrint LPD-LPR Print Server DoS Vulnerability

A vulnerability in the NIPrint could allow an attacker to remotely overflow an internal buffer which could allow code execution. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MySQL < 3.23.56 'mysqld' Privilege Escalation Vulnerability

MySQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2005 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

Kerio Personal Firewall Buffer Overflow

Kerio Personal Firewall is vulnerable to a buffer overflow on the administration port. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Exchange XEXCH50 Remote Buffer Overflow

This system appears to be running a version of the Microsoft Exchange SMTP service that is vulnerable to a flaw in the XEXCH50 extended verb. SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

CVE-2003-0887

The CVE-2003-0887 entry concerns ez-ipupdate (versions 3.0.11b7 and earlier) that creates insecure temporary cache files, enabling a local user to perform unauthorized operations via a symlink attack on the ez-ipupdate.cache file. The linked SUSE/other entries reiterate the same flaw without prov...

CVE-2003-1233

Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier is affected. The root cause is the ability to create a symbolic link via NtCreateSymbolicLinkObject to access sensitive kernel resources, specifically to \Device\PhysicalMemory or via a drive letter created with subst. This bypas...

CVE-2004-2527

The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service CPU and memory consumption by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quick...

CVE-2004-2521

Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service application crash via a large number of connections to TCP port 1 25 SMTP or 2 110 POP...

CVE-2004-2527

CVE-2004-2527 affects Windows XP (pre-SP2) and Windows Server 2003 local/remote desktop login screens. Repeated WinKey+U launches multiple Windows Utility Manager processes, which can consume CPU/memory and cause a denial of service because copies are loaded faster than they can be closed when an...

CVE-2004-2521

CVE-2004-2521 affects Gattaca Server 2003 (version 1.1.10.0). The vulnerability allows a remote attacker to cause a denial-of-service (application crash) by opening a large number of connections to SMTP (port 25) or POP (port 110). The issue is documented across multiple sources (NVD, CVE list, E...

CVE-2004-2519

Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service CPU consumption via directory specifiers in the LANGUAGE parameter to 1 index.tmpl and 2 web.tmpl, such as a slash "/", b backslash "", c dot ".",, d dot dot "..", and e internal slash "lang//en"...

CVE-2004-2520

The CVE-2004-2520 entry affects Gattaca Server 2003, version 1.1.10.0. The vulnerability arises in the POP3 handling where remote authenticated users can trigger a denial of service (application crash) by sending a large numeric value in the LIST, RETR, or UIDL commands. The available documents d...

How to in Windows 2 0 0 3 to give the login password-vulnerability warning-the black bar safety net

In all NT systems, there are several ways you can get the login user's password. I know of three methods can achieve the purpose. 1. hook the winlogon in the several function, the Internet also has this type ofprogram, called winlogonhijack items in the rootkit. com has to offer, but that project...

CVE-2005-2126

The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted...

CVE-2005-2126

The CVE-2005-2126 entry concerns a tampering vulnerability in the Windows FTP client. Public documentation (MS05-044/MSKB 905495 and CERT 415828) describes that when Enable Folder View for FTP Sites is enabled and a user initiates an FTP transfer, a remote server can craft file names to cause the...