2279 matches found
gtkftpd[v1.0.4(and below)]: remote root buffer overflow exploit.
basic audit of gtkftpd; buffer overflow exists in the "LIST" command, in conjunction with a large file or directory namedoesn't account for the prefix to the buffer to exceed 256 bytes. this is explained in more detial in the exploit comment header. all purpose brute force exploit original exploi...
CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...
CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...
Windows NT 4.0 with IBM JVM Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Windows NT 4.0 with IBM JVM Denial of Service Release Date: 07/23/2003 Application: Any Java application, other applications are possible attack vectors. Platform: Java 2 Runtime Environmen...
Dr.Web File Name Handling Overflow
The remote host is running Dr.Web - an antivirus program. There is a flaw in the remote version of Dr.Web which may make it crash when scanning files whose name is excessively long. An attacker may use this flaw to execute arbitrary code on this host. To exploit it, an attacker would need to send...
InfoZip unzip directory traversal
Special characters in file name, skipped during extraction, allow to masquarade directory traversal...
CVE-2002-0875
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...
Various FTP clients fail to account for pipe (|) characters in default file names
Overview Various FTP client implementations do not correctly handle files whose name begins with the "|" pipe character. Description Most FTP clients include a feature in which the remote filename is used as the local filename in a GET RETR operation. For example, many FTP clients support syntax...
Key Focus KF Web Server 1.0.8 - Directory Traversal
source: https://www.securityfocus.com/bid/6180/info KeyFocus KF Web Server is vulnerable to a directory traversal attack. This is due to the web server's inability to properly handle file names containing consecutive dot characters. By exploiting this vulnerability, an attacker is able to break o...
DSA-154 fam - privilege escalation
Bulletin has no description...
CVE-2002-0716
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...
Various Vulnerabilities in ZoneAlarm MailSafe
Tuesday April 2, 2002 Various Vulnerabilities in ZoneAlarm MailSafe Scope ----------- Edvice recently tested ZoneLabs ZoneAlarm Pro ability to detect and quarantine incoming e-mail attachments that may contain malicious code or viruses. This functionality is provided by ZoneAlarm's MailSafe...
CVE-2002-0024
File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download...
Переполнение буфера в ripmime (buffer overflow)
Переполнение буфера при длинном имени файла...
WU-FTPD does not properly handle file name globbing
Overview SecurityFocus and CORE Security Technologies have reported a vulnerability in WU-FTPD. WU-FTPD does not handle file name globbing properly and may allow an attacker to execute arbitrary code. WU-FTPD is a widely-used FTP daemon that is included in many UNIX and Linux distributions. This...
CVE-2001-0875
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download...
CVE-2001-0449
Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option...
Дырка в fcheck (input validation)
При вызове внешней программы с именем файла не проверяется наличией shell-символов в имени файла...