2939 matches found
Design/Logic Flaw
The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...
CVE-2006-0632
The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...
CVE-2006-0632
The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...
CVE-2006-0632
The CVE-2006-0632 entry affects phpBB 2.0.19. The gen_rand_string function uses insufficiently random data (small value space) to generate the activation key (validation ID) sent by e-mail when establishing a password, enabling remote attackers to obtain the key and modify passwords for existing ...
CVE-2005-2411
Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...
realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities
realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12494/info Multiple remote vulnerabilities reportedly affect RealNetworks RealArcade. The first issue allows for arbitrary file deletion due to an input validation issue. The second issue is an...
CVE-2004-0116
CVE-2004-0116 maps to a Denial-of-Service in the RPCSS Service involved with DCOM activation. The issue is triggered by specially crafted activation requests that exhaust memory when the RPCSS service fails to reclaim discarded memory, leading to remote DoS on affected Windows versions. Affected ...
CVE-2004-0116: Undefined Security Weakness
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...
PT-2003-1814 · Microsoft · Windows 2000 +3
Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352...
CVE-2002-1017
Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code...
CVE-2002-1017: Undefined Security Weakness
Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code...
wbbboard 1.1.1 registration _new_users_vulnerability_
wbbboard 1.1.1 registration newusersvulnerability -------------------------------------------------- wbbboard : i cant find any contact info in credits : i send a message to wbbhacks.de and mywbb.de support forums, they didnt reply for 3 days i think enough Affected program : wbbboard 1.1.1 Vendo...
Microsoft Windows Media Player 7.0 - '.asx' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/1980/info Windows Media Player is an application used for digital audio, and video content viewing. An unsafe buffer copy involving remotely-obtained data exists in the Active Stream Redirector ASX component in Windows Media Player. The ASX enables a user...
nsover.txt
http://www.rootshell.com/ From [email protected] Wed Oct 21 18:00:09 1998 Date: Wed, 21 Oct 1998 19:23:45 -0500 From: Mr. Nothing To: [email protected] Subject: Netscape Buffer Overflow Here is a buffer overflow exploit for Netscape on x86 Linux. It can be activated remotely by the followi...
yahoo-pager-id.txt
Date: Fri, 25 Dec 1998 09:31:21 -0600 From: Nathan Neulinger Reply-To: Bugtraq List To: [email protected] Subject: Yahoo Pager - security bug w/ services 7,8 I've been working on a GTK unix yahoo pager client based on Doug Winslow's yppro2.c source and found the following security problem whil...
icq99a.DoS.txt
Date: Mon, 29 Mar 1999 01:07:18 -0500 From: Ronald A. Jarrell To: [email protected] Subject: icq DOS / possible "stupid user" vulnerability. Ok, I was a bit surprised when, in playing with the new ICQ99a build 1700 v2.13 client which I believe is the first publicly distributed one of the 99...
Q811632: Critical Update (Windows XP Media Center Edition Product Activation Hotfix)
Q811632: Critical Update Windows XP Media Center Edition Product Activation Hotfix...
