CVE-2004-2615

The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact...

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web...

CVE-2004-2570: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user...

Special characters for penetration invasion decrypt-vulnerability warning-the black bar safety net

AnalysisServerof the web application, likethe forum, chat rooms, and found their programming bugs or omissions, so for 8 0 port the penetration of the invasion, it seems just a hacker program Master of things. In fact, although we will not write programs, but the use of the special structure of t...

wu-ftpd ABOR privilege escalation

The remote Wu-FTPd server seems to be vulnerable to a remote privilege escalation. This version contains a flaw that may allow a malicious user to gain access to unauthorized privileges. Specifically, there is a flaw in the way that the server handles an ABOR command after a data connection has...

wu-ftpd S/KEY authentication overflow

The remote Wu-FTPd server seems to be vulnerable to a remote overflow. This version contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacke...

PHP Handicapper - Process_signup.php HTTP Response Splitting

PHP Handicapper - Processsignup.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15301/info PHP Handicapper is vulnerable to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker...

wu-ftpd MAIL_ADMIN overflow

The remote Wu-FTPd server seems to be vulnerable to a remote flaw. This version fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the use...

mod_ssl off by one

The remote host is using a version of modssl which is older than 2.8.10. This version is vulnerable to an off by one buffer overflow which may allow a user with write access to .htaccess files to execute arbitrary code on the system with permissions of the web server. Note that several Linux...

Kcms Profile Server

The Kodak Color Management System service is running. The KCMS service on Solaris 2.5 could allow a local user to write to arbitrary files and gain root access. This warning may be a false positive since the presence of the bug has not been tested. Patches: 107337-02 SunOS 5.7 has been released a...

Hacking Forum various means maximum exposure-vulnerability warning-the black bar safety net

Currently online there is a new trend, hackers attack target starts from the site extends to forums and chat rooms and message boards and other public places, and many users of the forum password was and the E-mail and QQ password exactly the same, so for all the network security threats is very...

Several GET locks web server

The remote web server shuts down temporarily or blacklists us when it receives several GET HTTP/1.0 requests in a row. This might trigger false positive in generic destructive or DoS plugins. The scanner enabled some countermeasures, however they might be insufficient. SPDX-FileCopyrightText: 200...

Lotus /./ database lock

It might be possible to lock out some Lotus Domino databases by requesting them through the web interface with a special request like /./name.nsf This attack is only efficient on databases that are not used by the server. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be...

Open News server

The remote News server seems open to outsiders. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Section network viagra intrusion detection system technology think-vulnerability warning-the black bar safety net

With the rapid development of Internet, the network security more and more by governments, businesses, and even personal attention. In the past, prevent network attacks the most common method is the firewall. However, relying solely on a firewall does not guarantee sufficient security, if the...

ASPNuke 0.80 - 'Language_Select.asp' HTTP Response Splitting

source: https://www.securityfocus.com/bid/14063/info ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how Web...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

CVE-2004-2091: Undefined Security Weakness

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

(FALSE ALARM ON) ncftp

Hey folks, An advisory recently went out on NcFTP, but it appears that the issue in question was fixed long ago in version 3.1.5, released on 2002-10-13. I received an email at [email protected] from a well-meaning user informing me that 3.1.9 had a security issue that was going unpatched: I...

HP-UX FTPD 1.1.214.4 - 'REST' Remote Brute Force

/ Author: phased /str0ke / include include include include include include include int main int argc, char argv int sock, rc; long int i; struct sockaddrin saddr; struct hostent h; char buf256; printf"DMhpux FTPd - REST bug brute forcer\n"; printf"by phased\n"; ifargc -- simple enough?\n",argv0;...