3228 matches found
NCH Officeintercom 5.20 - Remote Denial of Service
!/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.nch.com.au/oi/oisetup.exe Version: = v5.20 Tested on...
tomcat multiple content-length header poisioning
Jakarta Tomcat 5.0.19 Coyote/1.1 and Tomcat 4.1.24 Coyote/1.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat t...
Fedora 12 : maniadrive-1.2-21.fc12 / php-5.3.2-1.fc12 (2010-4212)
This is a maintenance release in the 5.3 series, which includes a large number of bug fixes. Security Enhancements and Fixes in PHP 5.3.2: - Improved LCG entropy. Rasmus, Samy Kamkar - Fixed safemode validation inside tempnam when the directory path does not end with a /. Martin Jansen - Fixed a...
The Uploader 2.0.4 - Remote File Disclosure
================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ================================================= ============================================== Script Name : The Uploader Version : 2.0.4 Language : php Author : Xa7m3d [email protected]...
Stack overflow
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Content-Length header...
File Sharing Wizard Content-Length头远程栈溢出漏洞
BUGTRAQ ID: 40866 File Sharing Wizard允许用户通过WEB浏览器远程访问PC上的文件。 远程攻击者可以通过向安装了File Sharing Wizard的机器发送包含有超长Content-Length头的HTTP请求触发栈溢出，导致执行任意代码。 iSharer and upRedSun Technologies File Sharing Wizard 1.5.0 厂商补丁： iSharer and upRedSun Technologies ---------------------------------...
CVE-2010-2330: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Content-Length header...
Integer overflow
Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via a large integer in the...
CVE-2010-1937
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug 3001896...
PT-2010-3673 · Sblim · Sblim-Sfcb
Name of the Vulnerable Software and Affected Versions: SBLIM SFCB versions 1.3.4 through 1.3.7 Description: The issue is related to an integer overflow in the httpAdapter.c component of SBLIM SFCB. This occurs when the configuration sets httpMaxContentLength to a zero value, allowing remote...
CVE-2010-1937: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug 3001896...
Apache Tomcat JK Connector Content-Length Header Cross-User Information Disclosure
Based on the Server response header, the installation of the JK Connector modjk in Apache Tomcat listening on the remote host is version 1.2.x prior to 1.2.27. It is, therefore, affected by an information disclosure vulnerability. A remote attacker can view the response associated with a differen...
McAfee ePolicy Orchestrator Agent HTTP POST Handling Flaw (CVE-2004-0095)
McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee ePolicy Orchestrator is a central security management system to manage security policy, assess and enforce policy, notify...
Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability (Windows)
The host is installed with Opera Web Browser and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gboperacontentlengthheaderbofvulnwin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability Windows Authors: Antu Sanadi...
Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability (Linux)
The host is installed with Opera Web Browser and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gboperacontentlengthheaderbofvulnlin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability Linux Authors: Antu Sanadi...
Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability - Windows
Opera Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability - Linux
Opera Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Integer overflow
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...
