9910 matches found
EORF2003-04: sbox path disclosure problem
--------------------------- EightOne Research Facility --------------------------- EORF2003-04 security advisory Title: sbox has a information disclosure problems Author: Julio "e2fsck" Cesar Vendor: http://stein.cshl.org/WWW/software/sbox Versions: sbox 1.04 and later Date: 18 Sep 2003 1...
Apache 2.0.x < 2.0.48 Multiple Vulnerabilities (OF, Info Disc.)
The remote host appears to be running a version of Apache 2.0.x prior to 2.0.48. It is, therefore, affected by multiple vulnerabilities : - The modrewrite and modalias modules fail to handle regular expressions containing more than 9 captures resulting in a buffer overflow. - A vulnerability may...
CGI bugs
No description provided...
SBox 1.0.4 - Full Path Disclosure
SBox 1.0.4 - Full Path Disclosure source: https://www.securityfocus.com/bid/8705/info sbox has been reported prone to a path disclosure vulnerability. The issue has been reported to present itself when a HTTP request is made for a CGI resource that does not exist. sbox will reportedly return an...
CGI bugs
No description provided...
SCO Internet Manager privilege escalation
It's possible to spoof authentication data lockally for suid CGI application...
CGI bugs
No description provided...
CGI bugs
No description provided...
CVE-2003-0709
Buffer overflow in the whois client, which is not setuid but is sometimes called from within CGI programs, may allow remote attackers to execute arbitrary code via a long command line option...
CVE-2003-0632
Buffer overflow in the Oracle Applications Web Report Review FNDWRR CGI program FNDWRR.exe of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL...
DEBIAN-CVE-2003-0615
Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...
CGI bugs
No description provided...
CGI bugs
No description provided...
CGI bugs
No description provided...
Stellar Docs Malformed Query Path Disclosure
The remote host is running StellarDocs There is a flaw in this system which may allow an attacker to obtain the physical path of the remote installation of StellarDocs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11817; scriptversion"1.21";...
CGI bugs
No description provided...
CVE-2003-0632
CVE-2003-0632 describes a buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI (FNDWRR.exe) used by Oracle E-Business Suite 11.0 and 11.5.1–11.5.8. The issue allows remote attackers to execute arbitrary code via a long URL. The provided documents identify the affected product...
CGI bugs
No description provided...
Novell NetWare Enterprise Web Server /perl/ handler vulnerable to buffer overflow
Overview Novell NetWare Enterprise Web Server contains a buffer overflow vulnerability that can be exploited via the /perl/ HTTP request handler. A remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the server process. Description Novell...