1285 matches found
Vulnerability in OpenSSL CVE-2002-0655
Inproper handling of ASCII representations of integers on 64 bit platforms allowed remote attackers to cause a denial of service or possibly execute arbitrary code. Found by OpenSSL Group A.L. Digital...
OpenSSL contains multiple buffer overflows in buffers that are used to hold ASCII representations of integers
Overview OpenSSL is an open-source implementation of the Secure Sockets Layer SSL protocol. There is a buffer overflow on 64-bit platforms related to the ASCII representation of integers. Description OpenSSL clients and servers running on 64-bit platforms prior to version 0.9.6e and pre-release...
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...
CVE-2001-1139
The CVE-2001-1139 entry concerns a Directory traversal vulnerability in ASCII NT WinWrapper Professional. The underlying issue allows an attacker to read arbitrary files by injecting a .. in the server request, indicating a path traversal flaw in the software’s handling of input paths. Public det...
CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...
CVE-2001-0265
CVE-2001-0265 concerns the Windows PGP ASCII Armor parser (versions Windows PGP 5 to 7.0.3, latest). The vulnerability arises from handling malformed ASCII-armored data, which allows an attacker to create arbitrary files in the same directory as the armored file. This can lead to arbitrary code e...
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...
Icecast 1.1.x/1.3.x - Directory Traversal
source: https://www.securityfocus.com/bid/2932/info Icecast is an open source audio-streaming server for both Unix and Microsoft Windows systems. Icecast does not filter encoded characters from URLs when receiving web requests. If a remote attacker crafts a URL containing the ASCII equivalent of...
CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...
Дырка в PGP для Windows (ASCII parser)
Можно сконфигурировать .asc-файл таким образом, что при его разборе будет перезаписан любой файл...
PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation
source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and public keys to facilitate transmission in e-mail messages. Wh...
PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation
PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and...
CVE-2000-1130
CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...
Дырки в WFTPD
Большое число расширенных ASCII-символов в строке приводит к переполнению буфера. Кроме того, имеется несколько недокументированных макросов, например C позволяет выяснить физическое расположение файлов...
DoS против WebShiedld
Сервис перестает работать после получения некорректного адреса в SMTP-сеансе. Кроме того, некорректно обрабатываются файлы с расширенным ASCII-символами в именах...
Проблема ASCII 01 в Internet Explorer
Символ 01 ASCII с кодом 1 имеет специальное значение в Internet Explorer и может быть использован для доступа к локальным документам...
Microsoft Internet Explorer 5.5 ASCII equivalent of "%01" security vulnerability....
The following security vulnerability has been found in Microsoft Internet Explorer version 5.5 When "" an undisplayable character, which is eaqual to the 1st caharacter in ASCII table - after the 0th... inserted in some strategic position in Javascript code ,it is possible to access to local fil...
GeoCel WindMail 3.0 - Remote File Read
GeoCel WindMail 3.0 - Remote File Read source: https://www.securityfocus.com/bid/1073/info WindMail is a command-line mailer that can be integrated with perl cgi applications to create form-mail capability for a website. WindMail 3.0 and possibly previous versions can be used to retrieve any asci...
GeoCel WindMail 3.0 - Remote File Read
source: https://www.securityfocus.com/bid/1073/info WindMail is a command-line mailer that can be integrated with perl cgi applications to create form-mail capability for a website. WindMail 3.0 and possibly previous versions can be used to retrieve any ascii file that the webserver has read acce...