100 matches found
HP StorageWorks P4000 Virtual SAN Appliance Login Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "HP StorageWorks...
CVE-2013-2343
CVE-2013-2343 affects HP LeftHand Virtual SAN Appliance (VSA) Hydra service. The vulnerability is in the LHNSessionManager component (listening on TCP port 13838) and is a stack buffer overflow caused by insufficient boundary checks on the username parameter during login. An unauthenticated remot...
HP StorageWorks P4000 Virtual SAN Appliance Login Buffer Overflow
This module exploits a buffer overflow vulnerability found in HP's StorageWorks P4000 VSA on versions prior to 10.0. The vulnerability is due to an insecure usage of the sscanf function when parsing login requests. This module has been tested successfully on the HP VSA 9 Virtual Appliance. Module...
Debian DSA-2343-1 : openssl - CA trust revocation
Several weak certificates were issued by Malaysian intermediate CA'Digicert Sdn. Bhd.' This event, along with other issues, has lead to Entrust Inc. and Verizon Cybertrust to revoke the CA's cross-signed certificates. This update to OpenSSL, a Secure Sockets Layer toolkit, reflects this decision ...
CVE-2010-2343
CVE-2010-2343 : A stack-based buffer overflow exists in D.R. Software Audio Converter (versions 8.1, 2007, and 8.05) that is triggered by a crafted .pls playlist file. Exploitation could allow remote attackers to execute arbitrary code. Public references (including vendor-agnostic security databa...
Easy CD-DA Recorder PLS Buffer Overflow
This module exploits a stack-based buffer overflow vulnerability in Easy CD-DA Recorder 2007 caused by an overlong string in a playlist entry. By persuading the victim to open a specially-crafted PLS file, a remote attacker can execute arbitrary code on the system or cause the application to cras...
CVE-2009-2343
Cross-site scripting XSS vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...
CVE-2009-2343
Cross-site scripting XSS vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...
CVE-2009-2343
CVE-2009-2343 is an XSS vulnerability in Zoph's people.php before version 0.7.0.6. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is Zoph (prior to 0.7.0.6); root cause details are not further elaborated in the provided document...
CVE-2008-2343
CVE-2008-2343 affects News Manager 2.0, where remote attackers can bypass restrictions and obtain sensitive information by directly requesting (1) db/connect_str.php and (2) login/info.php. The CVSS data shows Network-only access, no user interaction, with Partial confidentiality/integrity/availa...
CVE-2008-2343
News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request to 1 db/connectstr.php and 2 login/info.php...
CVE-2008-2343
creationtimestamp| type| source ---|---|--- 2008-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5624...
CVE-2002-2343
CVE-2002-2343 is an XSS vulnerability in NOCC 0.9–0.9.5 that allows remote attackers to inject arbitrary web script or HTML via email messages. Affected product versions: NOCC 0.9 through 0.9.5. The provided documents do not specify a remediation or patch version. If exploitation details are need...
CVE-2007-2343
Affected products: Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1. Component vulnerable: TFTPD. Root cause: stack-based buffer overflow. Impact: remote attackers can execute arbitrary code via crafted requests containing long file names; network-based exploit with high impact (...
CVE-2006-2343
The provided documents identify CVE-2006-2343 as a cross-site scripting (XSS) vulnerability in ManageEngine OpManager 6.0, affecting the Search.do path via the searchTerm parameter. The root cause is improper handling of user-supplied input leading to injected web script/HTML. Impact is remote co...
CVE-2005-2343
The CVE-2005-2343 issue affects the Research in Motion (RIM) BlackBerry Handheld web browser prior to 4.0.2. A denial of service can be triggered remotely by a specially crafted Java Application Description (JAD) file with an extremely long application name and vendor string, causing the browser ...
Research in Motion (RIM) BlackBerry Handheld web browser does not properly handle Java Application Description (JAD) files
Overview The Research in Motion RIM BlackBerry Handheld web browser is vulnerable to a denial of service via a specially crafted Java Application Description JAD file. Description The BlackBerry Handheld web browser does not properly handle malformed JAD files. JAD files in J2ME are used to...
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess restrictions defined in httpd.conf with directives like Deny From All by using an ErrorDocument directive. The Red Hat and CVE records confirm this is the same issue; vendor dispute noted that .htaccess applies to extern...
