8091 matches found
AppleFileServer LoginExt PathName Overflow
This module exploits a stack buffer overflow in the AppleFileServer service on MacOS X. This vulnerability was originally reported by Atstake and was actually one of the few useful advisories ever published by that company. You only have one chance to exploit this bug. This particular exploit use...
IMail LDAP Service Buffer Overflow
This exploits a buffer overflow in the LDAP service that is part of the IMail product. This module was tested against version 7.10 and 8.5, both running on Windows 2000. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
Unreal Tournament 2004 "secure" Overflow (Win32)
This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...
dtSearch DUNZIP32.dll Buffer Overflow Vulnerability
Networksecurity.fi Security Advisory 21-12-2005 Title: dtSearch DUNZIP32.dll buffer overflow vulnerability Criticality: High 3/3 Affected software: dtSearch versions prior than 7.20 Build 7136 Author: Juha-Matti Laurio info at networksecurity.fi, juha-matti.laurio at netti.fi Date: 21th December,...
perl security update
CentOS Errata and Security Advisory CESA-2005:881 Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming languag...
Moderate: Red Hat Security Advisory: perl security update
Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...
CVE-2004-2651
The CVE-2004-2651 issue affects YaCy before version 0.32 and involves multiple cross-site scripting (XSS) vulnerabilities. In the affected components, an attacker can inject arbitrary web script or HTML via (1) urlmaskfilter in index.html or (2) page in Wiki.html. CVSS base score is 4.3 (I:Partia...
CVE-2004-2652
The CVE concerns Snort before 2.3.0, where DecodeTCPOptions in decode.c can crash a system (denial of service) when handling TCP/IP options printed in FAST/verbose mode. The root cause is a null dereference triggered by packets with invalid TCP/IP options. Multiple vendors and issue trackers (NVD...
[SECURITY] [DSA 922-1] New Linux 2.6.8 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 922-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...
CVE-2004-2650
The CVE-2004-2650 entry concerns the Apache James spooler. Affected component: James 2.2.0 spooler retrieve function. Root cause: triggering various error conditions in the retrieve function can prevent a lock release, causing a memory leak and resulting in local-denial-of-service impact. The ava...
[security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00576017 Version: 8 HPSBUX01164 SSRT4884 HP-UX TCP/IP Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date:...
Fedora Core 3 : perl-5.8.5-18.FC3 (2005-1116)
Fixes security vulnerabilites: CVE-2005-3962: http://marc.theaimsgroup.com/?l=full-disclosure&m=113342788118630&w=2 CVE-2005-3912: https://vulners.com/cve/CVE-2005-3912 CVE-2005-0452: https://vulners.com/cve/CVE-2005-0452 CVE-2004-0976: https://vulners.com/cve/CVE-2004-0976 Note that Tenable...
Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow
This module exploits a buffer overflow in the CRAM-MD5 authentication of the MDaemon IMAP service. This vulnerability was discovered by Muts. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...
Mercury/32 v4.01a IMAP RENAME Buffer Overflow
This module exploits a stack buffer overflow vulnerability in the Mercury/32 v.4.01a IMAP service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mercury/32 v4.01a IMAP RENAME Buffer Overflow'...
IMail IMAP4D Delete Overflow
This module exploits a buffer overflow in the 'DELETE' command of the IMail IMAP4D service. This vulnerability can only be exploited with a valid username and password. This flaw was patched in version 8.14. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2004-2642
Yeemp 0.9.9 and earlier errors in encrypting inbound files allow remote attackers to spoof the sender’s identity. Affected: Yeemp inbound file handling (0.9.9 and earlier). Exploitation potential is network-based with low complexity; impact includes partial confidentiality and integrity loss, no ...
CVE-2004-2633
Affected software: Sesamie 1.0. The CVE describes an unspecified vulnerability that allows remote anonymous attackers to gain access to repositories of other users via unknown vectors. CVSS v2 base score 5.1 (Medium): Network vector, high attack complexity, no authentication, partial impact on co...
CVE-2004-2632
CVE-2004-2632 concerns phpMyAdmin versions 2.5.1 through 2.5.7. The vulnerability allows remote attackers to modify configuration settings using tampered $cfg['Servers'] variables, resulting in unauthorized access to MySQL servers. This is described in the CVE entry and corroborated by multiple s...
CVE-2004-2631
CVE-2004-2631 affects phpMyAdmin 2.5.1–2.5.7, where LeftFrameLight being FALSE enables eval injection in left.php, allowing remote attackers to execute arbitrary PHP code via a crafted table name. The issue is rated CVSS v2 base 7.5 (Network, Low attack complexity, no authentication). Connected a...