295 matches found
Fedora 13 : moodle-1.9.9-2.fc13 (2010-13250)
Multiple security fixes. No longer uses bundled php-pear-CAS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 12 : moodle-1.9.9-2.fc12 (2010-13254)
Multiple security fixes. No longer uses bundled php-pear-CAS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
CVE-2010-2795
phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value...
CVE-2010-2795
Summary : CVE-2010-2795 concerns the phpCAS library (pre-1.1.2) used by PHP-based apps such as Moodle. The vulnerability allows a remote authenticated user to hijack a session by supplying a crafted ticket value in the query string. The issue has been publicly discussed in multiple advisories (e....
IPSwitch IMAP Server 9.20 Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
IPSwitch IMAP Server <= 9.20 Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits =========================================================== IPSwitch IMAP Server include include include include "winsock2.h" pragma commentlib, "ws232" define usage voidfprintfstderr, "Ipsbitch vs Ipswitch IMAP \n\nExample: ipsbitch.exe ip...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow / Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" includ...
CVE-2007-2795
creationtimestamp| type| source ---|---|--- 2009-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9662...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
CVE-2009-2795
CVE-2009-2795: Heap-based buffer overflow in the Recovery Mode component of Apple iPhone OS before 3.1 and iPhone OS before 3.1.1 for iPod touch allows local users to bypass the passcode and access arbitrary data via vectors related to "command parsing." This description is supported by multiple ...
CVE-2007-2795
Ipswitch IMail Server IMAP component contains two heap/stack overflow issues: (1) in IMailsec.dll during IMAP LOGIN causing heap corruption, and (2) a long SUBSCRIBE IMAP command causing a stack-based overflow in the IMAP Daemon. Affects Ipswitch IMail Server before version 2006.21 (and related I...
CVE-2008-2795
The CVE refers to IDM Computer Solutions UltraEdit 14.00b where the FTP/SFTP client is vulnerable to directory traversal via a LIST response, enabling a remote server to create or overwrite arbitrary files using .. or ..\ sequences. Root cause is improper handling of directory components in the L...
KLA10375 WLF vulnerability in UltraEdit
A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Related products UltraEdit CVE list CVE-2008-27...
CVE-2006-2795
CVE-2006-2795 affects XiTi Tracking Script versions 6 and 7 RC. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the (1) xtref parameter in xiti.js and (2) an HTTP Referer header field. The note indi...