Computer Associates License Server GETCONFIG Overflow

This module exploits an vulnerability in the CA License Server network service. By sending an excessively long GETCONFIG packet the stack may be overwritten. Module Options msf use exploit/windows/license/calicserv/getconfig msf undefinedgetconfig show actions ...actions... msf undefinedgetconfig...

RHEL 4 : firefox (RHSA-2005:176)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:176 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the Firefox string handling functions. If a malicious website is able to...

CVE-2005-0598

Cisco ACNS RealServer RealSubscriber (ACNS 5.1) can be remotely DoS’d via malformed IP packets, causing the device to exhaust CPU (often 100%) and require a reboot to recover. Remediation per the CERT/ Cisco advisory: apply a patch or upgrade, or disable RealSubscriber and/or restrict access with...

CVE-2005-0603

The CVE-2005-0603 entry concerns phpBB up to version 2.0.12 where the viewtopic.php endpoint mishandles the highlight parameter containing invalid regular expression syntax. This causes a PHP error message that reveals the installation path, constituting a path disclosure vulnerability. Affected ...

CVE-2005-0600

Technical details about CVE-2005-0600 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources.

CVE-2005-0599

Cisco devices running Application and Content Networking System ACNS 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service CPU consumption via malformed IP packets...

CVE-2005-0608

CVE-2005-0608: A heap-based buffer overflow in WebMod’s server.cpp affects WebMod 0.47 (and older than 0.48). The vulnerability allows a remote attacker to crash the service and potentially execute arbitrary code via a POST request whose Content-Length underestimates the actual data sent. Impact ...

CVE-2005-0596

Consolidated details from connected sources confirm CVE-2005-0596 affects PHP 4’s readfile() function. The underlying issue is that reading a file whose size is a multiple of the system page size can crash the httpd/daemon, yielding a denial-of-service condition. The vulnerability is described as...

CVE-2005-0602

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges...

CVE-2005-0607

CubeCart 2.0.0–2.0.5 allows remote attackers to determine the server’s full path by calling certain PHP files without parameters (information.php, language.php, list_docs.php, popular_prod.php, sale.php, subfooter.inc.php, subheader.inc.php, cat_navi.php, check_sum.php). The flaw exposes the serv...

CVE-2005-0606

CubeCart 2.0.0–2.0.5 contains a Cross‑Site Scripting (XSS) vulnerability in settings.inc.php. The issue allows remote attackers to inject arbitrary HTML/web script via any of the following parameters used across multiple PHP files: cat_id, PHPSESSID, view_doc, product, session, catname, search, o...

CVE-2005-0606

Cross-site scripting XSS vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the 1 catid, 2 PHPSESSID, 3 viewdoc, 4 product, 5 session, 6 catname, 7 search, or 8 page parameters...

CVE-2005-0598

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System ACNS 5.1 allow remote attackers to cause a denial of service CPU consumption via malformed packets...

CVE-2005-0597

Cisco devices running Application and Content Networking System ACNS 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service process restart via a "crafted TCP connection."...

CVE-2005-0595

Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter...

CVE-2005-0599

CVE-2005-0599 affects Cisco Application and Content Networking System (ACNS) 4.x, 5.0, and 5.1 prior to 5.1.11.6. Exploitation by remote attackers via malformed IP packets can cause CPU exhaustion, leading to a denial of service on affected devices. A reboot is required to recover. Remediation: u...

CVE-2005-0604

CVE-2005-0604 affects lnss.exe in GFI Languard Network Security Scanner 5.0 . The vulnerability is that the program stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. This is the stated impact in the records,...

CVE-2005-0608

Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service crash and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent...

CVE-2005-0600

Cisco devices running Application and Content Networking System ACNS 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service bandwidth consumption via "crafted IP packets" that are continuously forwarded...

CVE-2005-0597

CVE-2005-0597 affects Cisco ACNS (Application and Content Networking System) versions 5.0 prior to 5.0.17.6 and 5.1 prior to 5.1.11.6. The vulnerability allows remote attackers to cause a denial of service (process restart) by sending a crafted TCP connection. No exploit details are provided in t...