CVE-2011-2961

AngelServer.exe 6.0.11.3 on Sunway pNetPower is affected by a heap-based buffer overflow triggered by a crafted UDP packet, enabling remote denial of service and possibly arbitrary code execution. The Red Hat/NVD entries corroborate the issue and identify the root cause as a heap overflow in Ange...

CVE-2006-2961

creationtimestamp| type| source ---|---|--- 2011-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16713 2016-01-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39274 2018-05-29 15:50:33+00:00| seen|...

CVE-2010-2961

creationtimestamp| type| source ---|---|--- 2010-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15074...

CVE-2010-2961

CVE-2010-2961 concerns mountall before 2.15.2, where the root.rules file is created with world-writable permissions (0666). This enables a local attacker to modify the file and potentially gain root privileges by triggering udev rules. Ubuntu’s USN-985-1 documents the fix: upgrade mountall to ver...

Ubuntu: Security Advisory (USN-985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS : mountall vulnerability (USN-985-1)

Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user. Note that Tenable Network Security has extracted the preceding descripti...

CVE-2010-2961

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file...

CVE-2009-2961

CVE-2009-2961 describes a stack-based buffer overflow in the player Thaddy de Konng KOL Player 1.0 , triggered by a long URL in a .MP3 playlist file. According to the records, this can allow a remote attacker to cause a denial of service or execute arbitrary code. The provided documents confirm t...

CVE-2009-2961

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9467...

CVE-2008-2961

Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrary local files via a .. dot dot in the 1 path and 2 p parameter...

CVE-2008-2961

CVE-2008-2961 affects CMS Mini 0.2.2. The vulnerability is a directory traversal in view/index.php, where an attacker can read arbitrary local files by supplying a .. sequence in the path parameter and the p parameter. Impact is partial confidentiality loss (read access to local files). The NVD e...

CVE-2007-2961

CVE-2007-2961 concerns an Unrestricted file upload vulnerability in FileCloset before 1.1.5. The issue allows remote attackers to upload arbitrary PHP files via unspecified vectors. The NVD entry records a CVSSv2 base score of 7.5 (HIGH) with network attack vector and no authentication required; ...

Immunity Canvas: CESARFTP

Name| cesarftp ---|--- CVE| CVE-2006-2961 Exploit Pack| CANVAS Description| CesarFTP Notes| CVSS: 7.5 Repeatability: This exploit is non repeatable... VENDOR: ACLogic CVE Url: https://vulners.com/cve/CVE-2006-2961 CVE Name: CVE-2006-2961...

CVE-2006-2961

CVE-2006-2961 is a stack-based buffer overflow in CesarFTP 0.99g and earlier triggered by the MKD command. The vulnerability is exploitable remotely over the network, potentially allowing code execution and a denial-of-service via a long MKD argument. Public references and tooling exist (Metasplo...

CVE-2005-2961

CVE-2005-2961 affects ProZilla (notably 1.3.7.4 and possibly earlier) via a buffer overflow in get_string_ahref when -ftpsearch is enabled, allowing remote servers to execute arbitrary code through a crafted HREF in an A tag. Public records in NVD and Debian DSAs indicate a remote code execution ...

Debian DSA-834-1 : prozilla - buffer overflow

Tavis Ormandy discovered a buffer overflow in prozilla, a multi-threaded download accelerator, which may be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 834-1] New prozilla packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 834-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...