Remote Compromise in Oracle 9i Database Server

NGSSoftware Insight Security Research Advisory Name: Oracle Remote Compromise Systems Affected: Oracle 9, 8 Platforms: All Operating Systems Severity: High Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Date: 6th February 2002 Advisory number: NISR06022002A...

CVE-2001-0090

The CVE-2001-0090 issue affects Internet Explorer 5.5 where the Print Templates feature can execute arbitrary ActiveX controls via custom print templates without user prompts. Root cause is that print templates are allowed to run ActiveX controls, creating remote code execution risk for the user ...

ssldump 0.9 b1 - Format String

source: https://www.securityfocus.com/bid/2096/info ssldump is a traffic analyzer for monitoring network traffic in real time. It is written and maintained by Eric Rescorla. A problem exists which could allow the arbitrary execution of code. The problem exists in the ssldump handling of format...

IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder

Georgi Guninski security advisory 28, 2000 IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder Systems affected: IE 5.x/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 20 October 2000 Legal Notice: This Adviso...

ircii_exploit.txt

The following exploits are for IrcII4.4. A dcc chat buffer overflow, one is for linux and the other one is for mirc. -- start irciisploit.txt -- / ircii-4.4 exploit by bladi & aLmUDeNa buffer overflow in ircii dcc chat's allow to excute arbitrary Affected: ircII-4.4 Patch: Upgrade to ircII-4.4M...

CVE-1999-0354

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message...

ie5_vulnerabilities.txt

Subject: IE 5.0 security vulnerabilities - ImportExportFavorites - at least creating and overwriting files, probably executing programs To: [email protected] Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer...

PT-1997-1094 · Gnu · Gnu Tar

Name of the Vulnerable Software and Affected Versions: GNU tar affected versions not specified Description: The issue allows an attacker to execute arbitrary commands when the GNU tar command is used in FTP sessions. Recommendations: At the moment, there is no information about a newer version th...

Immunity Canvas: WPDM_FILEUPLOAD

Name| wpdmfileupload ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| wpdmfileupload Notes| CVE Name: CWE-434 VENDOR: wpeden.com Changelog: Notes: WordPress Download Manager WPDM 2.6.92 allows for authenticated users admin, editor, author, contributor, subscriber to delete and upload...