Lucene search
+L

4004 matches found

myhack58
myhack58
added 2006/05/16 12:0 a.m.48 views

Do All in Cmd Shell-vulnerability warning-the black bar safety net

Directory 1, Preface 2, The file transmission 3, The system configuration 4, the network configuration 5, software installation 6, Windows Script 7, The accompanying statement Foreword Cmd Shellcommand line interactionis a hack eternal topic, it is the historic and enduring it. This article is...

7.7AI score
SaveExploits0
OSV
OSV
added 2006/05/15 4:6 p.m.14 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

6.7AI score
SaveExploits0References4
Prion
Prion
added 2006/05/15 4:6 p.m.15 views

Design/Logic Flaw

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS7AI score0.01213EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2006/05/15 4:6 p.m.26 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6AI score0.01213EPSS
SaveExploits0References1
NVD
NVD
added 2006/05/15 4:6 p.m.20 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6.8AI score0.01213EPSS
SaveExploits0References4
OSV
OSV
added 2006/05/15 4:6 p.m.3 views

DEBIAN-CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS7.1AI score0.01213EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2006/05/15 4:0 p.m.26 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

6.8AI score0.01213EPSS
SaveExploits0References4
CVE
CVE
added 2006/05/15 4:0 p.m.47 views

CVE-2006-2366

CVE-2006-2366 affects libopenobex/ircp 1.2. The ircp -r mode does not prompt before overwriting files in OBEX File Transfer, allowing user-assisted remote attackers to overwrite arbitrary destination files. Concrete details in the NVD/NVD-derived entries confirm the vulnerability in ircp_io.c and...

2.6CVSS6.8AI score0.01213EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2006/05/15 4:0 p.m.47 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6.6AI score0.01213EPSS
SaveExploits0
NVD
NVD
added 2006/04/25 12:50 p.m.17 views

CVE-2006-2007

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port...

7.5CVSS8.1AI score0.0469EPSS
SaveExploits0References8
Prion
Prion
added 2006/04/25 12:50 p.m.16 views

Heap overflow

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port...

7.5CVSS8.9AI score0.0469EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2006/04/25 10:0 a.m.52 views

CVE-2006-2007

CVE-2006-2007 describes a heap-based buffer overflow in Winny 2.0 b7.1 and earlier. The vulnerability occurs when processing certain commands sent to the file transfer port, using unvalidated input (long strings) that can lead to remote code execution. Affected product: Winny (2.0 b7.1 and earlie...

7.5CVSS8.1AI score0.0469EPSS
SaveExploits0References8Affected Software1
Check Point Advisories
Check Point Advisories
added 2006/03/26 12:0 a.m.26 views

How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk

Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...

5.4CVSS1.9AI score0.00832EPSS
SaveExploits0
NVD
NVD
added 2006/03/23 11:6 p.m.21 views

CVE-2006-1366

Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service device shutdown, and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer aka FTP service on Bluetooth channel 9...

7.8CVSS7.7AI score0.04883EPSS
SaveExploits1References7
securityvulns
securityvulns
added 2006/03/22 12:0 a.m.35 views

[Full-disclosure] DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack'

DMA2006-0321a - 'Motorola P2K Platform setpath overflow and Blueline attack' Author: Kevin Finisterre Vendor: http://www.motorola.com Product: 'Motorola PEBL U6, Motorola V600, other Motorola P2k based phones?' References: http://www.digitalmunition.com/DMA2006-0321a.txt...

0.5AI score
SaveExploits0
curl security advisories
curl security advisories
added 2006/03/20 8:0 a.m.10 views

TFTP Packet Buffer Overflow

libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix "tftp://", using a valid host and a path part that is longer tha...

7.5CVSS8.5AI score0.05133EPSS
SaveExploits0Affected Software2
Metasploit
Metasploit
added 2006/01/16 2:59 a.m.50 views

freeFTPd 1.0 Username Overflow

This module exploits a stack buffer overflow in the freeFTPd multi-protocol file transfer service. This flaw can only be exploited when logging has been enabled non-default. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS7.4AI score0.71506EPSS
SaveExploits9
Tenable Nessus
Tenable Nessus
added 2006/01/15 12:0 a.m.29 views

Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-139-1)

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented 'a', a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member. Note that Tenable Network Security has...

5CVSS5.7AI score0.02481EPSS
SaveExploits0References1
NVD
NVD
added 2006/01/09 11:3 a.m.31 views

CVE-2006-0138

aMSN aka Alvaro's Messenger allows remote attackers to cause a denial of service client hang and termination of client's instant-messaging session by repeatedly sending crafted data to the default file-transfer port TCP 6891...

5CVSS6.5AI score0.06427EPSS
SaveExploits2References2
Prion
Prion
added 2006/01/09 11:3 a.m.34 views

Design/Logic Flaw

aMSN aka Alvaro's Messenger allows remote attackers to cause a denial of service client hang and termination of client's instant-messaging session by repeatedly sending crafted data to the default file-transfer port TCP 6891...

5CVSS7.2AI score0.06427EPSS
SaveExploits2References2
Rows per page
Query Builder