8091 matches found
CVE-2004-2383
Microsoft Internet Explorer 5.0–6.0 is identified as vulnerable to a Cross-Frame Scripting Restriction bypass (CVE-2004-2383). The issue arises when an HTML document with JavaScript outside a frameset that includes the target domain can cause the frameset to retain focus, enabling an attacker to ...
CVE-2004-2380
The CVE describes a directory traversal vulnerability in Twilight Utilities Web Server 2.0.0.0, exploitable through postfile.exe where an attacker can abuse the attfile parameter containing .. to write arbitrary files. Affected component is postfile.exe; the underlying cause is improper validatio...
x_aix5_bellmail.pl.txt
-bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfile : then file wich you want to cho...
MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================ MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit ============================================================ This file is part of the Metasploit Framework and may be...
MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)
$Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
CVE-2004-2302
CVE-2004-2302 is a race condition in the Linux kernel’s sysfs_read_file and sysfs_write_file, present in 2.6.10 and earlier. It can let local users read kernel memory and cause a denial of service (crash) by exploiting large offsets in sysfs files. Public advisories (e.g., Debian DSA-922-1) docum...
CVE-2004-2300
The CVE-2004-2300 entry concerns a buffer overflow in snmpd for ucd-snmp 4.2.6 and earlier when run as root-setuid. Local users could potentially execute arbitrary code via a long -p argument. Multiple sources (Red Hat, Debian security tracker, NVD) reiterate the same description; there is explic...
CVE-2004-2301
CVE-2004-2301 affects Eudora before 6.1.1. A buffer overflow in the email processing (long To: field) can be remotely triggered by a specially crafted message, leading to a denial of service (crash). Affected products are Qualcomm/Eudora 6.1 and earlier. Root cause—overflow in the email parser—pr...
CVE-2004-2298
Affected products: Novell Internet Messaging System (NIMS) 2.6/3.0 and NetMail 3.1/3.5. Vulnerability: Installed with a default NMAP authentication credential, enabling unauthorized access. Impact: Remote attackers can read and write mail store data if the administrator does not change the creden...
CVE-2004-2299
The CVE-2004-2299 entry concerns Omnicron OmniHTTPd 3.0a and earlier with a buffer overflow triggered by an HTTP GET request containing a long Range header. This allows remote attackers to execute arbitrary code. Connected sources reference a related “too long URL” vulnerability family; specifics...
CVE-2004-2294
CVE-2004-2294 affects PHP-Nuke 6.0 through 7.3, where the send_review function in the Reviews module has a canonicalize-before-filter error. Text parameter processing allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences after the text is checked for dangero...
CVE-2004-2296
CVE-2004-2296 affects the PHP-Nuke Reviews module (versions 6.0–7.3) where the preview_review function on Windows allows a remote attacker to obtain sensitive information by supplying an invalid date parameter, which triggers an error message. The vulnerability is described as a potential partial...
CVE-2004-2290
The CVE-2004-2290 issue affects Microsoft Windows XP Explorer. It arises when a user browses a self-executing folder containing HTML and script that references an executable within the folder, causing arbitrary code execution when the folder is accessed. The provided documents describe the vulner...
CVE-2004-2297
The CVE-2004-2297 case concerns the Reviews module of PHP-Nuke versions 6.0 through 7.3. The vulnerability is a denial of service caused by a large, out-of-range score parameter that can consume CPU and memory. The available sources (NVD, CVE lists) describe the impact as a CPU/memory DoS but do ...
CVE-2004-2291
CVE-2004-2291 affects Microsoft Windows Internet Explorer 5.5 and 6.0. A remote attacker can run arbitrary code by delivering an embedded script that uses Shell Helper objects and a shortcut (link) to trigger the target script. No exploitation details are provided in the connected documents. No r...
CVE-2004-2286
CVE-2004-2286 maps to an integer overflow in ActivePerl’s duplication operator, enabling remote DoS and potentially arbitrary code execution via a large multiplier. Affected: ActivePerl 5.x up to 5.8.3 and earlier. Root cause: overflow during duplication. Impact: Denial of service and possible co...
CVE-2004-2293
PHP-Nuke 6.0–7.3 is affected by multiple XSS flaws in the Encyclopedia module (via the eid parameter or the module query), in Reviews module via the preview_review function (parameters: url, cover, rlanguage, hits), and in Reviews via savecomment (uname parameter). Root cause: improper handling o...