CVE-2003-1472

Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service crash and possibly execute arbitrary code via a long banner...

Design/Logic Flaw

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

CVE-2007-5240

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

CVE-2007-5240

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

flip30-pass.txt

!/usr/bin/perl use strict; use IO::Socket; my $app = "Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 = index$data, ""; my $index3 = index$data, "", $index2+2; my...

Oracle Jinitiator 1.1.8 Vulnerabilities CVE-2007-4467 - Additional Information

US-CERT released an advisory on August 28, 2007 regarding multiple stack buffer overflows in the Oracle Jinitiator product Vulnerability Note VU474433/CVE-2007-4467. Due to limited public technical information on Jinitiator, no access to the Oracle support website, and maybe lack of cooperation...

Unrestricted file upload

Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/...

W3Filer Banner处理远程缓冲区溢出漏洞

BUGTRAQ ID: 24709 W3Filer是一款小型的文件下载工具。 W3Filer在处理超长的Banner返回数据时存在漏洞，远程攻击者可能利用漏洞导致工具崩溃。 如果W3Filer客户端在试图发送文件时接收了很大的banner，就会触发缓冲区溢出，导致僵死，用户必须杀掉进程；或应用程序会立即崩溃。 Satyavrat Mehrotra W3Filer 2.1.3 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.smehrsoft.com/ / W3Filer Buffer Overflow...

Elxis CMS <= 2006.4 - banner module - sql injection

Elxis Content Management System Banner Mod SQL Injection Jun 14 2007 ------------------------------------------------------------------------------- Product Elxis Content Management System Vulnerable Versions All versions to 2006.4 of the Elxis CMS. Vendor Status The Vendor was notified and the...

Ace-FTP FTP client buffer overflow

Buffer overflow on parsing server banner...

[Full-disclosure] Extending JavaScript Portscanning to Include Banner Grabbing

There's a new paper/advisory at: http://bindshell.net/papers/ftppasv Here's a quick summary: A common implementation flaw in FTP clients allows FTP servers to cause clients to connect to other hosts. This seemly small vulnerability has some interesting consequences for web browser security namely...

SmartFTP超长Banner信息远程堆溢出漏洞

SmartFTP是一款FTP 客户端工具，使用与资源管理器类似的操作界面。 SmartFTP在处理FTP服务器的banner回复时存在堆溢出漏洞，远程恶意FTP服务器可能利用此漏洞控制用户机器。 如果服务器向客户端返回了超过4000字节的超长Banner回复的话就可能触发这个溢出，导致执行任意指令。 SmartFTP SmartFTP 2.0.1002 SmartFTP -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.smartftp.com/...

CVE-2007-0790

Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner...

ebp2x-rfi.txt

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...

CVE-2007-0178

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

CVE-2007-0178

CVE-2007-0178 describes a PHP remote file inclusion vulnerability in Easy Banner Pro 2.8’s info.php, exploitable via the s[phppath] parameter to execute arbitrary PHP code on the server. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack vector and low complexity, resulting...

CVE-2007-0178

PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the sphppath parameter...

Easy Banner Pro Version 2.8 <= Remote File Inclusion

+-------------------------------------------------------------------- + + Easy Banner Pro Version 2. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Easy Banner Pro Version + Venedor ...........: http://www.phpwebscripts.com...

Easy Banner Pro 2.8 - 'info.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21967/info Easy Banner Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...