6697 matches found
CVE-2002-0511
The CVE concerns the default nscd configuration in Caldera OpenLinux 3.1/3.1.1, where PTR records are cached instead of querying the authoritative DNS for the A record. This may let remote attackers bypass host-name based access controls. No explicit remediation is described in the provided docum...
CVE-2002-0801
The CVE-2002-0801 issue affects Macromedia JRun 3.1 on Windows, where the ISAPI DLL filter for JRun is vulnerable to a buffer overflow via a long Host header in a request for a .jsp file. This allows a remote attacker to execute arbitrary code with SYSTEM privileges by sending a crafted request t...
Immunity Canvas: SAVANT
Name| savant ---|--- CVE| CVE-2002-1120 Exploit Pack| CANVAS Description| savant Notes| CVE Name: CVE-2002-1120 VENDOR: Savant VersionsAffected: Savant 3.1 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1120 CVSS: 7.5...
Savant Web Server 3.1 - Malformed Content-Length Denial of Service
source: https://www.securityfocus.com/bid/5707/info Savant Webserver is prone to a denial of service attack, when processing a negative integer located in a users Content-Length value. It should be noted that versions below 3.1 may also be vulnerable to this issue. GET / HTTP/1.0 Content-Length: ...
Savant Web Server 3.1 - Malformed Content-Length Denial of Service
Savant Web Server 3.1 - Malformed Content-Length Denial of Service source: https://www.securityfocus.com/bid/5707/info Savant Webserver is prone to a denial of service attack, when processing a negative integer located in a users Content-Length value. It should be noted that versions below 3.1 ma...
Savant Web Server 3.1 - File Disclosure
source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this issue. http://host/passwordfolder. "GET...
CVE-2002-0957
CVE-2002-0957 affects BlackICE Agent 3.1.eal and 3.1.ebh. The issue arises from a default configuration with a high tcp.maxconnections, which could allow remote attackers to cause a denial of service through a large number of connections that consume memory. The provided documents do not specify ...
CVE-2001-1079
CVE-2001-1079 concerns the creation of keyfile directories with world-writable permissions in PSSP 3.2 with DCE 3.1 authentication on AIX. The underlying issue is that a local user can exploit these permissions to delete key files, leading to a denial of service. The description specifies the aff...
Another flaw in Apache?
Hello. While playing with the SetEnv directive with Apache, I noticed that httpd processes are dying with a signal 11 if the data stored in an environment variable was too long. I simply triggered the bug by creating a .htaccess file so a regular user can do it with : SetEnv DATELOCALE "..." The...
CVE-2001-1133
Technical details about CVE-2001-1133 are not publicly provided in the supplied documents. No concrete affected products, versions, root cause, impact, or remediation are present. Monitor for updates in future disclosures.
CVE-2001-0850
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...
CVE-2001-0850
The CVE-2001-0850 entry concerns a configuration error in the libdb1 package of OpenLinux 3.1. The vulnerability arises from insecure versions of snprintf and vsnprintf used by libdb1, which could allow local or remote users to trigger a buffer overflow. Affected software: OpenLinux 3.1 (libdb1)....
CVE-2001-0850
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...
CVE-1999-1489
Vulnerability summary: CVE-1999-1489 describes a buffer overflow in the TestChip function of XFree86 SuperProbe used on Slackware Linux 3.1 . The overflow enables local users to obtain root privileges by supplying a long -nopr argument. Nature and impact (as documented): Local privilege escalatio...
CVE-1999-1265
SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "" parenthesis character, such as 1 SEND, 2 VRFY, 3 EXPN, 4 MAIL FROM, 5 RCPT TO...
[SECURITY] [DSA-055-1] gftp remote exploit
Package : gftp Problem type : printf format attack Debian-specific: no The gftp package as distributed with Debian GNU/Linux 2.2 has a problem in its logging code: it logged data received from the network but it did not protect itself from printf format attacks. An attacker can use this by making...
CVE-2001-0211
CVE-2001-0211 describes a directory traversal vulnerability in WebSPIRS 3.1 where the CGI parameter sp.nextform can be manipulated with a .. sequence to read arbitrary files. Multiple sources (NVD and CVE listings) confirm the affected product as WebSPIRS 3.1 and the impact as information disclos...
CVE-2001-0211
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. dot dot attack on the sp.nextform parameter...
CVE-2000-1019
Ultraseek Web Server (Inktomi/Verity) is affected by CVE-2000-1019 in 3.1 and 3.1.10. A remote attacker can cause a denial-of-service by sending a malformed URL, leading to the server hanging or becoming unresponsive. Related OpenVAS/Nessus entries corroborate a remote DoS via malformed URLs and ...