554 matches found
Confixx Pro 3.3.1 (saveserver.php) Remote File Inclusion Vulnerability
No description provided by source. Confixx = PRO 3.3.1 Remote File Inclusion Vulnerability ! Application homepage : http://www.swsoft.com/de/products/confixx/ ! Author : H4 / XPK ! Contact : http://xpkzxc.com/ ! Bug discovered : 2007-07-21 ! Bug published : 2007-07-24 ! Risk : Moderate Do not...
Confixx Pro 3.3.1 - saveserver.php Remote File Inclusion
Confixx Pro 3.3.1 - saveserver.php Remote File Inclusion Confixx = PRO 3.3.1 Remote File Inclusion Vulnerability ! Application homepage : http://www.swsoft.com/de/products/confixx/ ! Author : H4 / XPK ! Contact : http://xpkzxc.com/ ! Bug discovered : 2007-07-21 ! Bug published : 2007-07-24 ! Risk...
Openfire < 3.3.1 Admin Console Privilege Escalation
Binary data 4070.prm...
Admin Phorum 3.3.1.a (del.php include_path)File Include Vulnerability
Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Hacker at w.Cn Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php";...
Fedora Core 3 : kdelibs-3.3.1-2.9.FC3 (2005-245)
Wed Mar 23 2005 Than Ngo 6:3.3.1-2.9.FC3 - Applied patch to fix konqueror international domain name spoofing, CVE-2005-0237, 147405 - get rid of broken AltiVec instructions on ppc - Wed Mar 2 2005 Than Ngo 6:3.3.1-2.8.FC3 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150092 thanks KDE security...
CVE-2002-2099
Buffer overflow in the GNU DataDisplay Debugger DDD 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE...
Fedora Core 3 : kdenetwork-3.3.1-3.2 (2005-623)
Multiple integer overflow flaws were found in the way Kopete processes Gadu-Gadu messages. A remote attacker could send a specially crafted Gadu-Gadu message which would cause Kopete to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project assigned the name...
Fedora Core 3 : kdelibs-3.3.1-2.14.FC3 (2005-594)
A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on system settings it may be possible for a local user to read the backup files created by Kate or Kwrite. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-1920 to this issue. User...
CVE-2004-1145
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier 1 allow access to restricted Java classes via JavaScript and 2 do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary file...
CVE-2004-1145
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier 1 allow access to restricted Java classes via JavaScript and 2 do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary file...
CVE-2002-0239
CVE-2002-0239 affects hanterm (Hangul terminal for X11). The vulnerability is a buffer overflow in the font handling code that reads Korean characters, triggered by long strings in the (1) -fn, (2) -hfb, or (3) -hfn arguments, for hanterm versions 3.3.1 and earlier. The issue can let a local atta...
AOLServer contains buffer overflow in ParseAuth()
Overview AOLServer versions 3.3.0 and earlier contain an exploitable buffer overflow. This can lead to arbitrary execution of code on the system. Description AOLServer is a free open source web server. It was originally written by America Online AOL, and is currently developed and maintained by A...
CVE-1999-1554
SGI IRIX issue CVE-1999-1554: The /usr/sbin/Mail program does not properly set the group ID to the start-user’s group, enabling local users to read others’ mail on SGI IRIX 3.3 and 3.3.1. Root cause: group ID handling in Mail is incorrect. Impact: local privilege/ownership breach by reading mail ...
AOLserver 3.0 vulnerability
Aolserver 3.0 will crash when it is given a long authorization string. It is also possible this vulnerability will allow a hacker to execute arbitrary code through a buffer overflow. I have not verified a buffer overflow exists. Aolserver 3.4 and 3.3.1 are not vulnerable to this attack. Here is a...