1324 matches found
CVE-2004-0934: Undefined Security Weakness
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system...
[SA12460] eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability
TITLE: eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12460 VERIFY ADVISORY: http://secunia.com/advisories/12460/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: eZphotoshare 1.x http://secunia.com/product/2592/ eZ 3.x...
CVE-2001-1279
CVE-2001-1279 affects tcpdump 3.x (likely 3.6x) with a buffer overflow in the AFS RPC decoding path (print-rx.c). Exploitation via crafted AFS RPC packets with invalid lengths can cause a denial of service and may allow remote code execution with the privileges of tcpdump (typically root). The is...
CVE-1999-1537: Undefined Security Weakness
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service resource exhaustion via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the...
CVE-2001-0042: Undefined Security Weakness
PHP 3.x PHP3 on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. dot dot attack containing "%5c" encoded backslash sequences...
XV 3.x - '.BMP' Parsing Local Buffer Overflow
/ xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align n00batlocalho.outernet ./a.out 0xbffff388...
XV 3.x - .BMP Parsing Local Buffer Overflow
XV 3.x - .BMP Parsing Local Buffer Overflow / xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align...
SWAT PreAuthorization PoC
Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" [email protected]'s advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV,...
PHPX 3.x - news.php Cross-Site Request Forgery Arbitrary Command Execution
PHPX 3.x - news.php Cross-Site Request Forgery Arbitrary Command Execution source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly...
KPhone 2.x/3.x/4.0.1 - Malformed STUN Packet Denial of Service
source: https://www.securityfocus.com/bid/10159/info A denial of service vulnerability has been reported in KPhone. This issue may be triggered by a malformed SIP Session Initiation Protocol STUN message. This is due to insufficient validation of user-specified STUN packet attribute lengths,...
PT-2004-2751 · Solarwinds · Dameware Mini Remote Control
Name of the Vulnerable Software and Affected Versions: DameWare Mini Remote Control versions 3.x through 3.73 DameWare Mini Remote Control versions 4.x through 4.1 Description: The issue allows remote attackers to gain sensitive information because the Blowfish encryption key is transmitted in...
IA WebMail 3.x Buffer Overflow
This exploits a stack buffer overflow in the IA WebMail server. This exploit has not been tested against a live system at this time. Module Options msf use exploit/windows/http/ia/webmail msf undefinedwebmail show actions ...actions... msf undefinedwebmail set ACTION msf undefinedwebmail show...
Denial of service in Cajun P13x/P33x switch family firmware 3.x
Problem Description There exists a denial of service attack in the AVAYA Cajun P33x and P13x switch family with firmware versions 3.x. It is possible to stop the switch for 30 seconds. By repeating the attack access can be denied for arbitrarily long periods of time. 2. Tested systems The...
PHPOutsourcing Zorum 3.x - Remote File Inclusion Command Execution
PHPOutsourcing Zorum 3.x - Remote File Inclusion Command Execution source: https://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrar...
PHPOutsourcing Zorum 3.x - Remote File Inclusion Command Execution
source: https://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrary PHP script containing commands that may be carried out on the...
CVE-2002-1393
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via 1 URLs, 2 filenames, or 3 e-mail addresses...
CVE-2002-1393: Undefined Security Weakness
Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via 1 URLs, 2 filenames, or 3 e-mail addresses...
CVE-2002-1281
Unknown vulnerability in the rlogin KIO subsystem rlogin.protocol of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL...
CVE-2002-1281
CVE-2002-1281 is a KDE KIO rlogin/telnet protocol vulnerability. The KDE 2.x releases (2.1 and later) and KDE 3.x up to 3.0.4 allow a crafted URL in an HTML page, email, or other KIO-enabled app to execute arbitrary commands with the victim’s account, enabling local or remote code execution. Publ...
