Adobe Download Manager buffer overflow

Overview Adobe Download Manager contains a buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to run arbitrary code with the privileges of the affected user or cause a denial-of-service condition. Description Adobe Download Manager ADM ADM is a utility that Adobe...

CVE-2006-5856

Summary (CVE-2006-5856): Adobe Download Manager (ADM) prior to version 2.2 contains a stack-based buffer overflow in the AOM file parser. A long section name in the dm.ini file (populated from AOM files) can be used by a remote attacker to execute arbitrary code. Exploitation generally requires t...

CVE-2006-5856

Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file...

Adobe Download Manager buffer overflow

Stack buffer overflow on parsing AOM files...

Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Download Manager application. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the AOM file format...

EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability

eEye Research - http://research.eeye.com Adobe Download Manager AOM Stack Buffer Overflow Vulnerability Release Date: December 5, 2006 Date Reported: November 10, 2006 Severity: High Code Execution Systems Affected: Adobe Download Manager 2.1.x and earlier Overview: eEye Digital Security has...

KLA10040 RCE vulnerability in Adobe Download Manager

An unspecified vulnerability was found in Adobe Download Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from network at a point related to a dm.ini file via a stack-based buffer overflow. Original advisories Adobe bulletin...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager aka Xtreme Downloads 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 download.php, 2 manager.php, 3 admin/scripts/category.php, 4 includes/addallow.php, 5...

CVE-2006-2964

The CVE-2006-2964 entry concerns Xtreme Scripts Download Manager (aka Xtreme Downloads) v1.0. It documents multiple PHP remote file inclusion flaws in six scripts—download.php, manager.php, admin/scripts/category.php, includes/add_allow.php, admin/index.php, and admin/admin/login.php—where an att...

CVE-2006-2964

Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager aka Xtreme Downloads 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 download.php, 2 manager.php, 3 admin/scripts/category.php, 4 includes/addallow.php, 5...

CVE-2006-2361

PHP remote file inclusion vulnerability in pafiledbconstants.php in Download Manager mxBB pafiledb integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in pafiledbconstants.php in Download Manager mxBB pafiledb integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-2361

CVE-2006-2361 describes a PHP remote file inclusion in pafiledb_constants.php within the Download Manager (mxBB pafiledb) integration used with phpBB. The underlying issue is an attacker-controlled URL in the module_root_path parameter that can lead to arbitrary PHP code execution on the server. ...

CVE-2006-2361

PHP remote file inclusion vulnerability in pafiledbconstants.php in Download Manager mxBB pafiledb integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2005-3769

SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2005-3769

SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2005-3769

CVE-2005-3769 affects PHP Download Manager

PHP Download Manager 1.1.x - files.php SQL Injection

PHP Download Manager 1.1.x - files.php SQL Injection source: https://www.securityfocus.com/bid/15517/info PHP Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

PHP Download Manager 1.1.x - 'files.php' SQL Injection

source: https://www.securityfocus.com/bid/15517/info PHP Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

[security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00557788 Version: 1 HPSBPI02078 SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server J7961A Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as...