96 matches found
CVE-2010-2074
istream.c in w3m 0.5.2 and possibly other versions, when sslverifyserver is enabled, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...
CVE-2010-2074
The CVE-2010-2074 issue affects istream.c in w3m 0.5.2 (and potentially other versions) where, when ssl_verify_server is enabled, a NULL character ('\0') in a certificate’s domain name (CN or SAN) can allow MITM spoofing of SSL servers via a certificate issued by a trusted CA. This is a domain-na...
BolinTech Dream FTP Server 1.02 Format String
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BolinTech...
CVE-2009-2074
Cross-site scripting XSS vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names...
CVE-2009-2074
CVE-2009-2074 is a cross-site scripting (XSS) vulnerability in the Drupal module Nodequeue . The issue affects: Nodequeue versions 5.x before 5.x-2.7 and 6.x before 6.x-2.2 . It allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocab...
CVE-2008-2074
CVE-2008-2074 affects Harris Wap Chat 1.0. Multiple PHP remote file inclusion vulnerabilities occur when register_globals is enabled. Attackers can cause arbitrary PHP code execution by supplying a URL in the sysFileDir parameter to a set of scripts (eng.writeMsg.php, eng.adCreate.php, eng.adCrea...
BolinTech Dream FTP Server 1.02 Format String
This module exploits a format string overflow in the BolinTech Dream FTP Server version 1.02. Based on the exploit by SkyLined. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BolinTech Dream F...
CVE-2007-2074
CVE-2007-2074 affects ScramDisk 4 Linux prior to 1.0-1. Local users may gain privileges via mounted containers because certain programs execute with SUID permissions. Root cause: SUID containers enable privilege escalation. Exploitation details are not provided in the supplied documents. No remed...
CVE-2006-2074
CVE-2006-2074 affects Juniper Networks JUNOSe E-series routers before 7-1-1. The vulnerability lies in the DNS “client code” and is described as having unknown impact with remote attack vectors; the issue is exploitable over a network, with potential complete confidentiality, integrity, and avail...
CVE-2002-2074
CVE-2002-2074 is an SQL injection vulnerability in Mailidx prior to 20020105. According to NVD, it allows remote attackers to execute arbitrary SQL commands via the search web page, with a base CVSS v2 score of 7.5 (HIGH) and network vector. Affected product/version detail is Mailidx before 20020...
CVE-2005-2074
CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...
CVE-2004-2074
CVE-2004-2074 affects BolinTech Dream FTP Server 1.02. A format string vulnerability in handling PASS and RETR commands allows a local user to crash the service (DoS). Public references document a Metasploit/Exploit-DB presence validating the flaw and citing public proofs of concept. The CVSS bas...
DreamFTP Server username Remote Format String
The remote DreamFTP server is vulnerable to a format string attack when processing the USER command. An attacker may exploit this flaw to gain a shell on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12086; scriptcveid"CVE-2004-2074"; scriptbugtraqid9800;...
