CVE-2007-1502

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a 1 long command, 2 long server argument to the a connect or b server commands, 3 long nick argument to the c nick command, or a long 4 nick or 5 message argument to the d ctcp, e chat, f notice, ...

Memory corruption

The Tape Engine in CA formerly Computer Associates BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than...

security flaw

PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service server crash and possibly access...

Input validation

The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments...

CVE-2006-7019

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the 1 textevento and 2 emaileventonomeevento parameters to phpwcmscodesnippets/mailfileform.php and sampleextphp/mailfileform.php, which is processed by the renderPHPcode...

Fedora Core 5 : postgresql-8.1.7-1.fc5 (2007-198)

Sun Feb 4 2007 Tom Lane 8.1.7-1 - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556 Related: 225496 - Wed Jan 10 2007 Tom Lane 8.1.6-1 - Update to PostgreSQL 8.1.6 - Mon Dec 11 2006 Tom Lane 8.1.5-1 - Update to PostgreSQL 8.1.5 - Update to PyGreSQL 3.8.1 - Adjust init script to not...

security flaw

PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service server crash and possibly access...

USN-417-1: PostgreSQL vulnerabilities

Jeff Trout discovered that the PostgreSQL server did not sufficiently check data types of SQL function arguments in some cases. An authenticated attacker could exploit this to crash the database server or read out arbitrary locations in the server's memory, which could allow retrieving database...

CVE-2007-0709

cmdmon.sys in Comodo Firewall Pro formerly Comodo Personal Firewall 2.4.16.174 and earlier does not validate arguments that originate in user mode for the 1 NtCreateSection, 2 NtOpenProcess, 3 NtOpenSection, 4 NtOpenThread, and 5 NtSetValueKey hooked SSDT functions, which allows local users to...

CVE-2007-0627

The CVE-2007-0627 issue affects gtalkbot (before v1.2). The root cause is that username and password are placed on the command line, enabling local users to obtain credentials by listing the process. The vulnerability exposes sensitive information via process listing (local exploit). The connecte...

Mac OS X SLP daemon buffer overflow

Buffer overflow on parsing arguments list of SLP request...

CVE-2007-0317

Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted arguments. NOTE: some of these details are obtained from third party information...

CVE-2007-0317

Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted arguments. NOTE: some of these details are obtained from third party information...

CVE-2007-0317

Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted arguments. NOTE: some of these details are obtained from third party information...

formbank19-traverse.txt

!perl found by Bl0od3r visit http://dc3.dl.am download:http://www.download-tipp.de/cgi-bin/jump.cgi?ID=8796 developer:http://www.fersch.de/formbankserver/ use LWP::Simple; sub usage die"file.pl host.com /../file.txt"; $host= $ARGV0; $file= $ARGV1; if !$host die"No Host."; ; if !$file die"No File....

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

CVE-2006-6236

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

PT-2006-6440 · Rhadrix · Rhadrix If-Cms

Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue allows remote attackers to obtain the full path of the web server. This is achieved by providing empty arguments, specifically rns or pag, which results in an error message that...

HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation

/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...

eIQNetworks ESA Topology DELETEDEVICE Overflow

This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the DELETEDEVICE command in the Topology server, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires...