Sophos Anti-Virus 6.5.4 Vulnerability

Name Cross Site Scripting Vulnerability in Sophos Anti-Virus Systems Affected Sophos Anti-Virus, version 6.5.4 R2 Severity Medium Category Cross Site Scripting Author Context Information Security Ltd Advisory 6th September 2007 Description ----------- A ZIP archive containing a virus signature wi...

DEBIAN-CVE-2007-4400

CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

SHTTPD文件名解析错误信息泄露漏洞

BUGTRAQ ID: 24618 CVECAN ID: CVE-2007-3407 SHTTPD是一款轻量级的简单易用的web服务器。 SHTTPD处理HTTP请求时存在漏洞，远程攻击者可能利用此漏洞获取脚本源码。 SHTTPD没有正确地处理HTTP请求，如果用户在所提交的URI后附加了“%20”字符的话，就可能导致泄露某些脚本的源码。 Sergey Lyubka SHTTPD 1.38 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://shttpd.sourceforge.net/...

Analysis upload vulnerability-vulnerability warning-the black bar safety net

This article sent to the hacker line of Defense of 2006.4 period, reproduced please indicate the Analysis upload vulnerability in the form English / the loneliness of the hedgehog In a brief introduction through the injection vulnerability check and fill, following the coupling re-introduce a...

yEnc32 Decoder超长文件名堆缓冲区溢出漏洞

yEnc32是一款简单易用的GUI y编码器/y解码器。 yEnc32不正确处理文件名数据，远程攻击者可以利用漏洞进行堆溢出攻击，可能以应用程序权限执行任意指令。 当解码包含超长文件名的yEnc编码的文件时，可导致破坏堆缓冲区，精心构建提交数据可能以应用程序权限执行任意指令。 yEnc32 1.0.7.207 升级程序： yEnc32 yEnc32 1.0.7.207 yEnc32 yenc32-108.exe http://superb-east.dl.sourceforge.net/sourceforge/yenc32/yenc32-108.exe...

Pagode 0.5.8 - navigator_ok.php?asolute Remote File Disclosure

Pagode 0.5.8 - navigatorok.php?asolute Remote File Disclosure Pagode 0.5.8navigatorok.php asoluteRemote File Disclosure D.Script:http://belnet.dl.sourceforge.net/sourceforge/pagode/pagode-0.5.8.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In...

Pagode 0.5.8 (navigator_ok.php asolute) Remote File Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== Pagode 0.5.8 navigatorok.php asolute Remote File Disclosure Vuln =================================================================== Pagode 0.5.8navigatorok.php...

McAfee VirusScan On-Access扫描器超长Unicode文件名缓冲区溢出漏洞

McAfee VirusScan是一款流行的实时病毒保护应用程序。 McAfee VirusScan产品中的On-Access扫描器组件在处理包含有多字节字符的超长文件名时存在堆溢出漏洞，远程攻击者可能利用此漏洞控制受影响的系统。 如果目标系统安装了东亚语言文件并且将默认的Unicode代码页设置为包含有多字节的语言（如中文）的话，则在试图打开恶意文件或仅仅将鼠标悬停在该文件上就可能触发这个溢出，导致执行任意指令。 0 McAfee VirusScan Enterprise 8.0.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a...

Expow 0.8 File manager Autoindex.php (cfg_file) Remote File Inclusion Vulnerability

Expow 0.8 File manager Autoindex.php cfgfile Remote File Inclusion Vulnerability found by : mdx -------------------------------------------------------------------------- Download script : http://sourceforge.net/project/downloading.php?groupid=29595&usemirror=kent&filename=expow-0.8.tar.gz&929272...

[Full-disclosure] iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow

McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow iDefense Security Advisory 04.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2007 I. BACKGROUND McAfee VirusScan is an AntiVirus application that offers protection against the latest computer virus...

TFTP Server 1.3 Remote Buffer Overflow Denial of Service Exploit

No description provided by source. Name : TFTPServerMT v 1.3 Remote Buffer Overflow Dos Exploit Author: Umesh Wanve Date: 01-03-2007 Desc: This is latest version of TFTP server. EDI gets overwritten at 246. So code execution may be possible Someone can better write it. Sending a long file name on...

TFTP Server 1.3 - Remote Buffer Overflow (Denial of Service) (PoC)

TFTP Server 1.3 - Remote Buffer Overflow Denial of Service PoC Name : TFTPServerMT v 1.3 Remote Buffer Overflow Dos Exploit Author: Umesh Wanve Date: 01-03-2007 Desc: This is latest version of TFTP server. EDI gets overwritten at 246. So code execution may be possible Someone can better write it...

NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (1)

/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 1 There is remote buffer overflow in NewsReactor 20070220 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to your ip:119 and ask him to...

CVE-2007-0949: Undefined Security Weakness

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

Microsoft Visual C++ (.RC)资源文件远程栈溢出漏洞

Microsoft Visual C++是基于Windows平台的C++编译器。 Microsoft Visual C++资源编译器RCDLL.DLL模块的MSDEV.EXE进程在处理.rc资源文件时存在栈溢出漏洞，远程攻击者可能利用此漏洞通过诱骗用户打开恶意资源文件来控制用户机器。 在处理类似于以下的文件名字段时： 1 TYPELIB MOVEABLE PURE "FilePath01"...

CVE-2006-6665

Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name tag in a dbr file...

CVE-2006-6665

Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name tag in a dbr file...

CVE-2006-6665: Undefined Security Weakness

Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name tag in a dbr file...

GnuPG buffer overflow

Buffer overflow on oversized file name...

Debian DSA-1220-1 : pstotext - insecure file name quoting

Brian May discovered that pstotext, a utility to extract plain text from Postscript and PDF files, performs insufficient quoting of file names, which allows execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...