7084 matches found
CVE-1999-1362
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...
mod_python imported modules inderect calls
It's possible to inderectly call unsafe function via imported module...
PHP problem
This is not really an advisory, but a warning for sysadmins running webservers with PHP. I noticed that it was possible to rebuild the user database Unix even when safemode prevented from reading /etc/passwd and openbasedir prevented from accessing /etc. The implementation of getpwuid,nam functio...
Buffer overflows in Compaq Tru64 Unix
Buffer overflow in libc locale functions and -session switch of dtprintinfo...
Bypassing safe mode in PHP
It's possible to bypass safe mode limitation by using moveuploadedfile call and MySQL library functions to access files of different users...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. Multiple signedness errors mixed signed and unsigned numbers in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsy...
SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow
SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow // source: https://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long "expires",...
SapporoWorks Black JumboDog 2.6.4/2.6.5 - HTTP Proxy Buffer Overflow
// source: https://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long "expires", "if-modified-since", and "LastModified" strings containing executable code....
ASI Oracle Security Alert: Oracle Home Environment Variable Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Home Environment Variable Buffer Overflow For additional details, the official advisories from Oracle Corporation can be downloaded from: http://otn.oracle.com/deploy/security/pdf/dbsmpalert.pdf Summary: By setting a long ORACLEHOME value more...
Обратный путь в директориях в функциях fts из libc (directory traversal)
Сконструировав специальные имена файлов можно выйти за пределы дерева директорий...
NetBSD Security Advisory 2001-016: unsafe chdir usage in fts(3)
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-016 ================================= Topic: unsafe chdir usage in fts3 Version: All NetBSD releases prior to July 9, 2001. Severity: Local users can trick processes that walk file system trees to perform their actions in the wrong...
Обход защиты в CylantSecure (protection bypass)
Из-за зажержки в обработке, программа может подгрузить модель с перенаправлением функций для обхода защиты...
Несанкционированный доступ в Active Web Classifieds (unauthorized access)
Ко многим конфигурационным функциям можно обратиться в обход защиты паролем...
Неавторизованный доступ через SSL к LDAP в Windows 2000 (unauthorized access)
При разрешенном доступе к LDAP через SSL можно получить неавторизованный доступ к ряду функций LDAP, включая смену пароля...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow. Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a sequence, as seen in 1 gopendir, 2 glstat, 3 gstat, and 4 the glob0 buffer as used i...
[SNS Advisory No.30] Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication
SNS Advisory No.30 Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication Problem first discovered: 24 May 2001 Published: 12 Jun 2001 Last Updated:12 Jun 2001 ----------------------------------------------------------------------- Overview --------- It is...
Aladdin Knowledge Systems eSafe Gateway 3.0 - HTML tag Script-filtering Bypass
Aladdin Knowledge Systems eSafe Gateway 3.0 - HTML tag Script-filtering Bypass source: https://www.securityfocus.com/bid/2800/info eSafe Gateway is a security utility used for filtering internet content. It is possible to craft an html file that slips through eSafe Gateway's script filtering...
insecure signal handler design
"Delivering Signals for Fun and Profit" Understanding, exploiting and preventing signal-handling related vulnerabilities. Michal Zalewski [email protected] C Copyright 2001 BindView Corporation 0 Introduction --------------- According to a popular belief, writing signal handlers has litt...
CVE-2001-0247
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a sequence, as seen in 1 gopendir, 2 glstat, 3 gstat, and 4 the glob0 buffer as used in the glob functions glob2 and glob3...
