CVE-2004-2478: Undefined Security Weakness

Unspecified vulnerability in Jetty HTTP Server, as used in 1 IBM Trading Partner Interchange before 4.2.4, 2 CA Unicenter Web Services Distributed Management WSDM before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CA BrightStor MS-SQL Server ARCserve Backup Agent Buffer Overflow (CAN-2005-1272)

...

CA BrightStor ARCserve Backup Agent for Windows Long String Overflow

This host is running BrightStor ARCServe MSSQL Agent. The remote version of this software is susceptible to a buffer overflow attack. An attacker, by sending a specially crafted packet, may be able to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

CA BrightStor ARCserve Backup Agent (dbasqlr.exe) Remote Exploit

Exploit for unknown platform in category remote exploits ================================================================ CA BrightStor ARCserve Backup Agent dbasqlr.exe Remote Exploit ================================================================ / CA BrightStor ARCserve Backup Agent for SQL -...

CA BrightStor ARCserve Backup (dsconfig.exe) Buffer Overflow

Exploit for unknown platform in category remote exploits...

CA BrightStor ARCserve Backup Agent (dbasqlr.exe) Remote Exploit

No description provided by source. / CA BrightStor ARCserve Backup Agent for SQL - dbasqlr.exe cybertronicatgmxdotnet / include stdio.h include sys/socket.h include netinet/in.h include netdb.h define PORT 6070 unsigned char bindshell =...

CA BrightStor ARCserve Backup - dsconfig.exe Remote Buffer Overflow

CA BrightStor ARCserve Backup - dsconfig.exe Remote Buffer Overflow / CA BrightStor ARCserve Backup Buffer Overflow - dsconfig.exe cybertronicatgmxdotnet / include include include include define PORT 41523 unsigned char bindshell = "\xeb\x19\x5e\x31\xc9\x81\xe9\x89\xff\xff\xff\x81\x36\x80\xbf\x32...

CA BrightStor ARCserve Backup Agent - dbasqlr.exe Remote Overflow

CA BrightStor ARCserve Backup Agent - dbasqlr.exe Remote Overflow / CA BrightStor ARCserve Backup Agent for SQL - dbasqlr.exe cybertronicatgmxdotnet / include include include include define PORT 6070 unsigned char bindshell = "\xeb\x19\x5e\x31\xc9\x81\xe9\x89\xff\xff\xff\x81\x36\x80\xbf\x32"...

CA BrightStor ARCserve Backup (dsconfig.exe) Buffer Overflow

No description provided by source. / CA BrightStor ARCserve Backup Buffer Overflow - dsconfig.exe cybertronicatgmxdotnet / include stdio.h include sys/socket.h include netinet/in.h include netdb.h define PORT 41523 unsigned char bindshell =...

CA BrightStor Agent for Microsoft SQL Overflow

This module exploits a vulnerability in the CA BrightStor Agent for Microsoft SQL Server. This vulnerability was discovered by cybertronicatgmx.net. Module Options msf use exploit/windows/brightstor/sql/agent msf undefinedagent show actions ...actions... msf undefinedagent set ACTION msf...

FreeBSD : mozilla -- built-in CA certificates may be overridden (8d823883-0ca9-11d9-8a8a-000c41e2cdad)

Under some situations, Mozilla will automatically import a certificate from an email message or website. This behavior can be used as a denial-of-service attack: if the certificate has a distinguished name DN identical to one of the built-in Certificate Authorities CAs, then Mozilla will no longe...

CVE-2005-2204

CVE-2005-2204 describes a cross-site scripting vulnerability in CA eTrust SiteMinder 5.5. When CSSChecking is set to NO, an attacker can inject arbitrary script/HTML through parameters to smpwservicescgi.exe (PASSWORD, BUFFER) and login.fcc (TARGET), and possibly other vectors. This affects SiteM...

CVE-2005-2204

Cross-site scripting XSS vulnerability in Computer Associates CA eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the 1 PASSWORD or 2 BUFFER parameters to smpwservicescgi.exe, 3 the TARGET parameter to...

CVE-2005-2204

Cross-site scripting XSS vulnerability in Computer Associates CA eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the 1 PASSWORD or 2 BUFFER parameters to smpwservicescgi.exe, 3 the TARGET parameter to...

CVE-2005-2204: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Computer Associates CA eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the 1 PASSWORD or 2 BUFFER parameters to smpwservicescgi.exe, 3 the TARGET parameter to...

CVE-2002-1824

CVE-2002-1824 affects Microsoft Internet Explorer 6.0. During an SSL/TLS handshake, when encountering an expired CA-CERT in a webserver’s certificate chain, IE6 does not prompt the user before automatically searching for a newer certificate, which could enable a man-in-the-middle attack. The avai...

CVE-2002-1824: Undefined Security Weakness

Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear...

CA eTrust Intrusion Detection System Detection

The remote host is running the CA eTrust Intrusion Detection System service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18536; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"CA eTrust Intrusion...

CA eTrust Intrusion Detection CPImportKey Function Overflow DoS

The remote host is running CA eTrust Intrusion Detection System, a security solution with intrusion detection, antivirus, web filtering and session monitoring. The remote version of this software is affected by a denial of service vulnerability in the way it uses 'CPImportKey' function. An attack...

citypostXSS.txt

sNKenjoi's Security Advisory: XSS Vunerabilities in Multiple CityPost Software Security Advisory: XSS Vunerabilities in Multiple CityPost Software Severity: Medium Title: XSS Vunerabilities in Simple PHP Upload, Simple Image Editor and Automated Link Exchange Vendor: Allen Kim Vendor Website:...