90 matches found
CVE-2008-3681
creationtimestamp| type| source ---|---|--- 2008-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6234...
Immunity Canvas: WINPCAP
Name| winpcap ---|--- CVE| CVE-2007-3681 Exploit Pack| CANVAS Description| winpcap Notes| CVE Name: CVE-2007-3681 VENDOR: WinPcap.org URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 Notes: This exploit will auto-target based on reading a kernel file on Windows 2000 o...
CVE-2007-3681
The CVE-2007-3681 issue affects WinPcap’s NPF.SYS kernel driver (before 4.0.1). The IOCTL 9031 handler BIOCGSTATS allows local users to overwrite memory via malformed Irp parameters, enabling arbitrary code execution in kernel context. Impact is local privilege escalation. Remediation is to upgra...
WinPcap NPF.SYS Local Privilege Escalation
WinPcap, a packet capture and filtering engine, is installed on the remote Windows host. The version of WinPcap on the remote host enables a local user to execute arbitrary code in kernel context because it fails to sufficiently sanitize Interrupt Request Packet parameters before passing them to...
System V login argument array buffer overflow
Added: 03/30/2007 CVE: CVE-2001-0797 BID: 3681 OSVDB: 690 Background The login program is used by various applications for authentication to the system. Problem The login program dervied from System V is affected by a buffer overflow vulnerability when processing a long argument array. A remote...
CVE-2006-3681
Multiple cross-site scripting XSS vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 refererpagesfilter, 2 refererpagesfilterex, 3 urlfilterex, 4 urlfilter, 5 hostfilter, or 6 hostfilterex parameters, a...
CVE-2006-3681
AWStats vulnerability CVE-2006-3681 affects AWStats 6.5 build 1.857 and earlier. It describes multiple cross-site scripting (XSS) vectors in awstats.pl through the parameters refererpagesfilter, refererpagesfilterex, urlfilterex, urlfilter, hostfilter, and hostfilterex, enabling remote attackers ...
CVE-2005-3681
CVE-2005-3681 describes a SQL injection vulnerability in the XOOPS WF-Downloads module 2.05. The flaw affects the file viewcat.php where the list parameter can be exploited to execute arbitrary SQL commands. Based on the provided documents, the vulnerability is exploitable remotely (network vecto...
