CVE-2008-1625: Undefined Security Weakness

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests...

CVE-2008-1478

Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service crash by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from third party information...

CVE-2008-1478

CVE-2008-1478 affects Home FTP Server 1.4.5.89. The vulnerability allows remote attackers to cause a denial of service (crash) by opening a passive FTP connection and then closing the original connection. The description notes that some details come from third-party information; no additional tec...

CVE-2008-1478: Improper Input Validation

Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service crash by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from third party information...

Home FTP Server DoS

Discovered by 0in from DaRk-CodeRs Programming & Security Group Contact: 0indotemailatgmaildotcom Thats a very funny bug, and nobody understand how it works; When we send a python FTP retrlines function bad command and create a new connection server got DoS... o0 Thats not overflow, it's probubly...

Authentication flaw

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

CVE-2008-1334

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

CVE-2008-1334

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

CVE-2008-1334

CVE-2008-1334 affects the BT Home Hub router (and related Thomson/Alcatel SpeedTouch components) where an authentication bypass is possible by placing a character at the end of PATH_INFO. The vulnerability lets remote attackers bypass authentication and read/modify administrative settings or init...

CVE-2008-1334: Improper Authentication

cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATHINFO, as demonstrated by 1 %5C encoded backslash, 2 '%' percent, and 3 '' tilde. NOTE:...

DEBIAN-CVE-2008-1270

moduserdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the nobody directory...

InterVideo WinDVD Media Center远程拒绝服务漏洞

BUGTRAQ ID: 28016 WinDVD Media Center是DVD、视频、音乐和照片的软件网络媒体播放器。 WinDVD Media Center的InterVideo IMC Server（IMCSvr.exe）和InterVideo Home Theater（IHT.exe）服务中存在空指针引用漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 如果远程攻击者向这些服务发送了包含有两个换行符的特制报文的话，就可能触发这个漏洞，导致受影响的进程崩溃。 InterVideo WinDVD Media Center 2.11.15.0 InterVideo ---------...

Design/Logic Flaw

InterVideo IMC Server aka IMCSvr.exe and InterVideo Home Theater aka IHT.exe in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted packet with two CRLF sequences. NOTE: the provenance of this informatio...

CVE-2008-1062

InterVideo IMC Server aka IMCSvr.exe and InterVideo Home Theater aka IHT.exe in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted packet with two CRLF sequences. NOTE: the provenance of this informatio...

Design/Logic Flaw

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...

CVE-2008-0673

TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...

DEBIAN-CVE-2008-0673

TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...

CVE-2008-0673

TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...