CVE-2011-4321

The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors...

CVE-2011-4321

The CVE-2011-4321 issue affects Joomla! 1.5.x through 1.5.24, where the password reset function uses weak random numbers. This weakness can allow remote attackers to change the passwords of arbitrary users via unspecified vectors. The provided sources confirm the affected product range and the ro...

Novell iPrint Client 5.52 - ActiveX Control Buffer Overflow (Metasploit)

$Id: novelliprintgetdriversettings2.rb 11888 2011-03-07 02:28:15Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Novell iPrint Client ActiveX Control <= 5.52 Buffer Overflow

$Id: novelliprintgetdriversettings2.rb 11886 2011-03-06 20:27:06Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-4321

creationtimestamp| type| source ---|---|--- 2011-01-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16014 2011-03-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16956 2018-05-29 15:50:33+00:00| seen|...

CVE-2010-4321

CVE-2010-4321 : Stack-based buffer overflow in the Novell iPrint Client ActiveX control ienipp.ocx (version 5.52). An attacker can send a long argument to the GetDriverSettings2/GetDriverSettings methods to trigger remote code execution. Public references in the provided documents include ZDI adv...

Novell iPrint Client ActiveX Control GetDriverSettings buffer overflow

Added: 11/24/2010 CVE: CVE-2010-4321 BID: 44966 OSVDB: 69357 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Client ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the Novell iPrint...

Design/Logic Flaw

The installation for Zen Cart stores sensitive information and insecure programs under the 1 docs, 2 extras, and 3 zcinstall folders, and 4 install.txt, which allows remote attackers to obtain sensitive information, delete the database, and conduct other attacks via a direct request, different...

CVE-2009-4321

Zen Cart CVE-2009-4321 affects extras/curltest.php in Zen Cart 1.3.8/1.3.8a (and possibly other versions), allowing remote attackers to read arbitrary local files via a file:// URI. The root cause cited is insufficient sanitization of user-supplied data, enabling information disclosure through th...

CVE-2009-4321

extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information...

CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

Authentication flaw

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

CVE-2008-4321

FlashGet (formerly JetCar) FTP 1.9 is affected by a remote buffer overflow in the PWD command response path, caused by insufficient boundary checking. Successful exploitation could lead to arbitrary code execution in the security context of the logged-in user. Affected software/version: FlashGet ...

Gentoo Security Advisory GLSA 200707-13 (fail2ban)

The remote host is missing updates announced in advisory GLSA 200707-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

FlashGet is prone to a remote buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4321

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6240 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6248 2008-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6256 2026-06-28...

Code injection

WRPCServer.exe in WinSoftMagic WinRemotePC WRPC Lite 2008 and Full 2008 allows remote attackers to cause a denial of service CPU consumption via a crafted packet to TCP port 4321...