CVE-2005-1267

The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...

GForge 3.x - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/13716/info GForge is affected by a remote command execution vulnerability. This issue arises because the application fails to sanitize user-supplied data passed through URI parameters. An attacker can supply arbitrary shell commands through the affected...

[SA15425] SurgeMail Unspecified Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-1439

Vulnerability summary (CVE-2004-1439) : The BlackJumboDog FTP server (3.x) is affected by a buffer/stack overflow due to improper length checks on multiple FTP commands, notably USER, PASS, RETR, CWD, XMKD, and XRMD. An attacker can remotely trigger this condition to execute arbitrary code on the...

[SA12460] eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability

TITLE: eZ / eZphotoshare Multiple Connection Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12460 VERIFY ADVISORY: http://secunia.com/advisories/12460/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: eZphotoshare 1.x http://secunia.com/product/2592/ eZ 3.x...

CVE-2001-1279

CVE-2001-1279 affects tcpdump 3.x (likely 3.6x) with a buffer overflow in the AFS RPC decoding path (print-rx.c). Exploitation via crafted AFS RPC packets with invalid lengths can cause a denial of service and may allow remote code execution with the privileges of tcpdump (typically root). The is...

XV 3.x - .BMP Parsing Local Buffer Overflow

XV 3.x - .BMP Parsing Local Buffer Overflow / xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align...

XV 3.x - '.BMP' Parsing Local Buffer Overflow

/ xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align n00batlocalho.outernet ./a.out 0xbffff388...

SWAT PreAuthorization PoC

Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" [email protected]'s advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV,...

PHPX 3.x - news.php Cross-Site Request Forgery Arbitrary Command Execution

PHPX 3.x - news.php Cross-Site Request Forgery Arbitrary Command Execution source: https://www.securityfocus.com/bid/10284/info It has been reported that PHPX is affected by multiple administrator command execution vulnerabilities. These issues are due to a failure of the application to properly...

KPhone 2.x/3.x/4.0.1 - Malformed STUN Packet Denial of Service

source: https://www.securityfocus.com/bid/10159/info A denial of service vulnerability has been reported in KPhone. This issue may be triggered by a malformed SIP Session Initiation Protocol STUN message. This is due to insufficient validation of user-specified STUN packet attribute lengths,...

PT-2004-2751 · Solarwinds · Dameware Mini Remote Control

Name of the Vulnerable Software and Affected Versions: DameWare Mini Remote Control versions 3.x through 3.73 DameWare Mini Remote Control versions 4.x through 4.1 Description: The issue allows remote attackers to gain sensitive information because the Blowfish encryption key is transmitted in...

Denial of service in Cajun P13x/P33x switch family firmware 3.x

Problem Description There exists a denial of service attack in the AVAYA Cajun P33x and P13x switch family with firmware versions 3.x. It is possible to stop the switch for 30 seconds. By repeating the attack access can be denied for arbitrarily long periods of time. 2. Tested systems The...

PHPOutsourcing Zorum 3.x - Remote File Inclusion Command Execution

PHPOutsourcing Zorum 3.x - Remote File Inclusion Command Execution source: https://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrar...

PHPOutsourcing Zorum 3.x - Remote File Inclusion Command Execution

source: https://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrary PHP script containing commands that may be carried out on the...

CVE-2002-1281

Unknown vulnerability in the rlogin KIO subsystem rlogin.protocol of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL...

CVE-2002-1281

CVE-2002-1281 is a KDE KIO rlogin/telnet protocol vulnerability. The KDE 2.x releases (2.1 and later) and KDE 3.x up to 3.0.4 allow a crafted URL in an HTML page, email, or other KIO-enabled app to execute arbitrary commands with the victim’s account, enabling local or remote code execution. Publ...

CVE-2002-1127

Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source -s command line parameter...

CVE-2002-1127

CVE-2002-1127: Buffer overflow in uucp for Compaq Tru64/OSF1 3.x enables local users to execute arbitrary code via a long source (-s) argument. Root cause: unchecked buffer handling in uucp. Affected: Tru64/OSF1 3.x; component: uucp. Impact: local code execution; data confidentiality/integrity/av...

CVE-2002-1128

Technical details about CVE-2002-1128 are not publicly available in the provided connected documents; available sources reiterate a buffer overflow in the inc mail utility for Compaq Tru64/OSF1 3.x via a long MH environment variable.