10533 matches found
CVE-2005-4835
The issue CVE-2005-4835 affects the MadWifi driver (ath_rate_sample in ath_rate/sample/sample.c) prior to version 0.9.3. Remote attackers can cause a denial of service or system crash by moving a connected host to a low-signal area, with possible additional vectors tied to a race between enabling...
Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)
...
Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)
No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...
Buffer overflow
Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812...
Mercur Messaging 2005 IMAP (SUBSCRIBE) Remote Exploit (win2k SP4)
No description provided by source. !/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to our shellcode. However this buffer in...
Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)
Exploit for unknown platform in category remote exploits ================================================================ Mercur Messaging 2005 import os import sys import time import socket import struct Place our w00tw00t egghunter in nop heaven shellcode = "\x90" 92 shellcode...
Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)
No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...
Mercur Messaging 2005 (Windows 2000 SP4) - IMAP 'Subscribe' Remote Overflow
!/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to our shellcode. However this buffer into which EBX points will give a...
CVE-2005-4833
The affected product is IBM WebSphere Application Server 6.0 prior to 20050201, vulnerable when serving pages in an Application WAR or an Extended Document Root. The root cause is lack of URL normalization, allowing remote attackers to access the JSP source code and other sensitive information vi...
CVE-2005-4834
CVE-2005-4834 affects IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3, where incorrect request processing by the web container allows remote attackers to obtain JSP source code and other sensitive information. The underlying issue is in the web container’s handling of requests, ena...
CVE-2005-4834
IBM WebSphere Application Server WAS 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container...
Fixed in Apache Tomcat 5.5.23, 5.0.SVN
Important: Information disclosure CVE-2005-2090 Requests with multiple content-length headers should be rejected as invalid. When multiple components firewalls, caches, proxies and Tomcat process a sequence of requests where one or more requests contain multiple content-length headers and several...
Cross site scripting
A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting XSS attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388...
CVE-2005-1730
CVE-2005-1730 covers multiple vulnerabilities in the OpenSSL ASN.1 parser as used by Novell iManager 2.0.2. The issue allows remote attackers to cause a denial of service via crafted packets, demonstrated by an OpenSSL ASN.1 brute-forcer. The root cause is tied to how the ASN.1 parser handles cra...
CVE-2005-4832
The CVE-2005-4832 entry concerns SQL injection in Oracle Database Server 10g impacting the SYS.DBMS_CDC_SUBSCRIBE and SYS.DBMS_CDC_ISUBSCRIBE packages, via the SUBSCRIPTION_NAME parameter. Connected sources confirm remote authenticated exploitation that can lead to arbitrary SQL execution with el...
CVE-2005-4831
Removed by vendor...
CVE-2005-4831
The CVE-2005-4831 issue affects ViewCVS up to at least version 0.9.2, where the content-type parameter can be used to set the HTTP Content-Type header to arbitrary values. This can enable cross-site scripting (XSS) and related attacks (demonstrated with text/html, and with image/jpeg rendered as ...
CVE-2005-4830
CVE-2005-4830 documents a CRLF injection vulnerability in ViewCVS version 0.9.2 of the viewcvs component. The flaw allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting by sending CRLF sequences in the content-type parameter. Affected software is ViewCVS 0.9...
CVE-2005-4829
Technical details about CVE-2005-4829 are not publicly provided in the connected documents. The descriptions lack specifics. Monitor for updates from vendors and security advisories.
