3137 matches found
HP Compaq Insight Management Agent 5.0 - Format String
source: https://www.securityfocus.com/bid/8336/info The Compaq Management Agent HTTP server is vulnerable to a format string issue. A remote attacker may be able to exploit this vulnerability in order to execute arbitrary code with Local System privileges. $ printf "GET /?Url=perl -e 'print...
HP Compaq Insight Management Agent 5.0 - Format String
HP Compaq Insight Management Agent 5.0 - Format String source: https://www.securityfocus.com/bid/8336/info The Compaq Management Agent HTTP server is vulnerable to a format string issue. A remote attacker may be able to exploit this vulnerability in order to execute arbitrary code with Local Syst...
CVE-2003-0616
CVE-2003-0616 is a format-string vulnerability in the McAfee ePolicy Orchestrator (ePO) server, affecting versions 2.0, 2.5, and 2.5.1. The issue resides in the ComputerList parameter where a POST request containing format specifiers is logged when a name resolution fails, potentially enabling re...
CVE-2003-0616
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution...
Mini SQL 1.01.3 - Remote Format String
Mini SQL 1.01.3 - Remote Format String // source: https://www.securityfocus.com/bid/8295/info Mini SQL mSQL has been reported prone to a remotely exploitable format string vulnerability, when handling user-supplied data. Reportedly a remote attacker may send malicious format specifiers to trigger...
miniSQL (mSQL) 1.3 - GID Remote Code Execution
miniSQL mSQL 1.3 - GID Remote Code Execution / /.------ /.------..---- / / \ /\ . // / . /\ / | / .\ . \ / / / \ | / | | slc | - -------||--.---.//-| //-.|----.|| / \ / / mSQL / required by fatal / include include / required by fatal / include include include include include include include...
miniSQL (mSQL) 1.3 Remote GID Root Exploit
No description provided by source. / /.------ /.------..---- / / \ /\ . // / . /\ / | / .\ . \ / / / \ | / | | slc | - -------||--.---.//-| //-.|----.|| / \ / / mSQL remote gid root exploit by lucipher & The Itch netric...
miniSQL (mSQL) 1.3 Remote GID Root Exploit
Exploit for linux platform in category remote exploits ========================================== miniSQL mSQL 1.3 Remote GID Root Exploit ========================================== / /.------ /.------..---- / / \ /\ . // / . /\ / | / .\ . \ / / / \ | / | | slc | - -------||--.---.//-|...
CVE-2003-0555
ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability...
CVE-2003-0510
CVE-2003-0510 is a format-string vulnerability in ezbounce limited to v1.0–1.50 that lets remote attackers run arbitrary code via the sessions command. The issue is network-accessible with no authentication required (per CVSS data); exploitation is noted in advisories, with some reports of obtain...
CVE-2003-0391
Format string vulnerability in Magic WinMail Server 2.3, and possibly other 2.x versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the PASS command...
Linux eXtremail 1.5.x Remote Format Strings Exploit
Exploit for linux platform in category remote exploits =================================================== Linux eXtremail 1.5.x Remote Format Strings Exploit =================================================== // / Linux eXtremail 1.5.x Remote Format Strings Exploit / / / / / / By B-r00t -...
ezbounce 1.01.5 - Format String
ezbounce 1.01.5 - Format String // source: https://www.securityfocus.com/bid/8071/info It has been reported that ezbounce is affected by a format string vulnerability. The condition is present in the file "ezbounce/commands.cpp" and can be triggered when session support is enabled. To exploit thi...
ezbounce remote format string vulnerability
A security hole exists that can be used to crash the proxy and execute arbitrary code. An exploit is circulating that takes advantage of this, and in some cases succeeds in obtaining a login shell on the machine...
ezbounce 1.0/1.5 - Format String
// source: https://www.securityfocus.com/bid/8071/info It has been reported that ezbounce is affected by a format string vulnerability. The condition is present in the file "ezbounce/commands.cpp" and can be triggered when session support is enabled. To exploit this vulnerability, the attacker mu...
CVE-2003-0478
Format string vulnerability in 1 Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including 2 digatech 1.2.1, 3 methane 0.1.1, 4 AndromedeIRCd 1.2.3-Release, and 5 ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute...
CVE-2003-0478
CVE-2003-0478 affects Bahamut IRCd 1.4.35 and earlier and related IRC daemons based on Bahamut (digatech 1.2.1, methane 0.1.1, AndromedeIRCd 1.2.3-Release, ircd-RU) when running in debug mode. The root cause is a format-string vulnerability in handling requests that permits remote attackers to ca...
Multiple Vendor IRC Daemon Debug Format String
The remote host is running a version of ircd that could be vulnerable to a format string attack. An attacker could exploit this flaw to execute arbitrary code on this host, or simply to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid1178...
[Full-Disclosure] Bahamut IRCd <= 1.4.35 and several derived daemons
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================== 0xbadc0ded Advisory 01 - 2003/06/26 - Bahamut IRCd = 1.4.35 and others ========================================================================== Reference...