CVE-2002-1756

ACDSee 4.0 allows remote attackers to cause a denial of service crash via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed...

CVE-2002-1756

CVE-2002-1756 affects ACDSee 4.0. The vulnerability arises in handling of .ais file properties when viewing a file’s description field, allowing remote attackers to trigger a crash (denial of service). The available documents describe the condition and impact but do not specify exploit code, affe...

CVE-2001-1487

CVE-2001-1487 affects Qualcomm Qpopper 4.0 and earlier. The popauth utility can be exploited via a symlink attack on the -trace option, allowing local users to overwrite arbitrary files and execute commands as the pop user. Impact is described as partial confidentiality, integrity, and availabili...

netmailsharpro.txt

Netmailshar 4.0 Build 15 Directory traversal & Users enumeration weakneses Release Date: 19 April ,2005 Severity: Medium Vendor: http://www.pppindia.com/ Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Microsoft...

CVE-2005-1719

Unknown vulnerability in ALWIL avast! antivirus 4 4.6.6230 and earlier, when running on Windows NT 4.0, does not properly detect certain viruses...

CVE-2005-1719

Technical details are not publicly available in the provided documents. Monitor for updates.

GForge 3.x - Arbitrary Command Execution

GForge 3.x - Arbitrary Command Execution source: https://www.securityfocus.com/bid/13716/info GForge is affected by a remote command execution vulnerability. This issue arises because the application fails to sanitize user-supplied data passed through URI parameters. An attacker can supply...

CVE-2004-1994

FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm...

CVE-2004-2034

CVE-2004-2034 describes a buffer overflow in the WildTangent Web Driver 4.0, specifically in the WTHoster and WebDriver modules. The vulnerability allows remote attackers to execute arbitrary code via a long filename. The available connected documents confirm the affected software/components and ...

CVE-2003-1166

CVE-2003-1166 describes a directory traversal vulnerability in HTTP Commander 4.0. The flaw affects the Openfile.aspx and Html.aspx components, where a .. (dot dot) in the file parameter can be used to view arbitrary files (remote access). Root cause: insufficient validation of the file parameter...

CVE-2004-1994

FuseTalk 4.0 contains a vulnerability where remote attackers can ban other users by making a direct request to banning.cfm. The description confirms network-attack feasibility with partial availability impact but provides no specific exploit details, affected versions, root-cause analysis, or rem...

CVE-2003-1166

Directory traversal vulnerability in 1 Openfile.aspx and 2 Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. dot dot in the file parameter...

CVE-2005-1287

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to member.asp, 2 forum parameter to forum.asp, or 3 various parameters in register.asp...

CVE-2005-1287

BK Forum 4.0 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.

CVE-2005-1287

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to member.asp, 2 forum parameter to forum.asp, or 3 various parameters in register.asp...

[SA15038] netMailshar Professional Two Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...

CVE-2001-1452

Affected software: Windows NT 4.0 and Windows 2000 Server. Vulnerability: DNS servers cache glue records from non-delegated name servers by default, enabling remote attackers to poison the DNS cache via spoofed DNS responses. Root cause: Default caching behavior of glue records. Impact: DNS cache...

CVE-1999-1579

The Cenroll ActiveX control xenroll.dll for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service resource consumption by creating a large number of arbitrary files on the target machine...

CVE-1999-1581

Memory leak in Simple Network Management Protocol SNMP agent snmp.exe for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service memory consumption via a large number of SNMP packets with Object Identifiers OIDs that cannot be decoded...

CVE-2004-0928

The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm"...