Issue key can be enumerated - Resolve Issue Feature

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to horizontal privilege elevation attacks within the Resolve Issue feature, accessible through the given address:...

USN-1228-1 : linux-ti-omap4 vulnerabilities

Timo Warns discovered that the EFI GUID partition table was not correctly parsed. A physically local attacker that could insert mountable devices could exploit this to crash the system or possibly gain root privileges. CVE-2011-1776 Dan Rosenberg discovered that the IPv4 diagnostic routines did n...

MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)

This host is missing a critical security update according to Microsoft Bulletin MS11-040 OpenVAS Vulnerability Test $Id: secpodms11-040.nasl 5362 2017-02-20 12:46:39Z cfi $ MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability 2520426 Authors: Antu Sanadi...

MS11-043: Vulnerability in SMB Client Could Allow Remote Code Execution (2536276)

The version of the SMB client software installed on the remote Windows host has an unspecified code execution vulnerability. The client does not properly parse unspecified SMB responses. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenable Network Security,...

Novell iPrint Client Netscape/ActiveX Location Header Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. Authentication is not required to exploit this vulnerability. The flaw exists within the nipplib.dll component which is used by both the Mozilla and IE browser plugins for...

3D FTP Client Directory Traversal Vulnerability

This host is installed with 3D FTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpod3dftpclientdirtraversalvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ 3D FTP Client Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright C 2010...

Xftp FTP Client 3.0 PWD Remote Buffer Overflow Exploit

$Id: xftpclientpwd.rb 9143 2010-04-26 18:56:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Xftp client 3.0 PWD Remote Exploit

No description provided by source. !/usr/bin/perl use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-new LocalPort = '21', Proto = 'tcp', Listen = '1' or die "Socket Not Created $!\n"; print "\n" . "Xftp client 3.0 PWD Exploit \n" . "Listening on port 21 \n" . "By:zombiefx Emai...

CVE-2010-0477

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle 1 SMBv1 and 2 SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the respons...

BulletProof FTP 2.63 b56 Client Malformed '.bps' File Stack Buffer Overflow

No description provided by source. / BulletProof FTP Client suffer a buffer overflow SEH. Tested on BullerProof FTP Client v. 2.63 build 56 The last one but may work with older releases as well Registers: EAX 00000000 ECX 65646362 EDX 7C9032BC ntdll.7C9032BC EBX 00000000 ESP 0012F1E0 EBP 0012F200...

32bit FTP (PASV) Reply Client Remote Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ============================================================ 32bit FTP PASV Reply Client Remote Overflow Exploit meta ============================================================ msf use exploit/windows/ftp/32bitftppasvreply msf...

CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...

CVE-2007-4449

The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service application hang via a command without an LF character, as demonstrated by a SAY command...

0irc-client v1345 build20060823 Denial of Service Exploit

No description provided by source. / 0irc-client v1345 build 20060823 DoS Exploit By DiGitalX [email protected] Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am Description: 0irc-client suffers from a NULL pointer derefrencing bug. / define WIN32LEANANDMEAN include winsock2.h...

USN-288-3: PostgreSQL client vulnerabilities

USN-288-1 described a PostgreSQL client vulnerability in the way the '''''''. If a client application uses one of the affected encodings and does...

FreeBSD : openvpn -- LD_PRELOAD code execution on client through malicious or compromised server (be4ccb7b-c48b-11da-ae12-0002b3b60e4c)

Hendrik Weimer reports : OpenVPN clients are a bit too generous when accepting configuration options from a server. It is possible to transmit environment variables to client-side shell scripts. There are some filters in place to prevent obvious nonsense, however they don't catch the good old...

CVE-2006-2057

Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an...

EEYE: Windows SMB Client Transaction Response Handling Vulnerability

Windows SMB Client Transaction Response Handling Vulnerability Release Date: February 8, 2005 Date Reported: August 2, 2004 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP Windows Server 2003 Overview: eEye Digital Security has discovered a...

Xpand Rally <= 1.0.0.0 (Server/Clients) Crash Exploit

Exploit for unknown platform in category dos / poc ===================================================== Xpand Rally include include ifdef WIN32 include / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous...

USN-63-1: MySQL client vulnerability

Javier Fernández-Sanguino Peña noticed that the "mysqlaccess" program created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...