7170 matches found
Ubuntu 4.10 : squid vulnerabilities (USN-67-1)
infamous41md discovered several Denial of Service vulnerabilities in squid. A malicious Gopher server could crash squid by sending a line bigger than 4096 bytes. CAN-2005-0094 If squid is configured to send WCPP Web Cache Communication Protocol messages to a 'home router', an attacker who was abl...
slsnif serial line sniffer buffer overflow
Buffer overflow on parsing HOME environment variable...
CVE-2005-4604
Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2005-4604
Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2005-4604
Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable...
CVE-2005-4604
Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable...
Linux printer drivers mtink buffer overflow
Buffer overflow on oversized HOME environment variable...
www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net
1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...
Web4Future eCommerce Enterprise Edition 2.1 - index.php Multiple SQL Injections
Web4Future eCommerce Enterprise Edition 2.1 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15707/info eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to...
Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net
Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...
CVE-2004-2577
The aclcheck function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts...
The use of site MIS-configuration to gain full control-vulnerability warning-the black bar safety net
In fact,now the online safety site and learn Black the site too much, 斡 Guoblowing na? bralso more and more,these contributed to the many sites and individuals, enhance safety awareness,is a good thing. So such as ipc$weak passwords,printer,IDQ remote overflow,UNICODE,3389 input and other...
CVE-2005-3595
By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer...
CVE-2005-3595
By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer...
CVE-2005-3595
CVE-2005-3595 concerns Windows XP Home Edition, where the default installation includes a blank Administrator password. This enables remote attackers to gain control of the machine without authentication, as described in the CVE records. The related connected documents corroborate that the vulner...
Apache UserDir Sensitive Information Disclosure
An information leak occurs on Apache based web servers whenever the UserDir module is enabled. The vulnerability allows an external attacker to enumerate existing accounts by requesting access to their home directory and monitoring the response. OpenVAS Vulnerability Test $Id: apacheusername.nasl...
IIS IDA/IDQ Path Disclosure
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. An attacker may use this flaw to gain more information about the remote host, and hence make more focused attacks. OpenVAS Vulnerability Test $Id:...
Apache HTTP Server UserDir Sensitive Information Disclosure
An information leak occurs on Apache HTTP Server based web servers whenever the UserDir module is enabled. The vulnerability allows an external attacker to enumerate existing accounts by requesting access to their home directory and monitoring the response. SPDX-FileCopyrightText: 2001 SecuriTeam...
CVE-2005-2926
Stack-based buffer overflow in 1 backupsh and 2 authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable...
Microsoft Windows Malicious Shortcut Handling Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code execution vulnerability when handling a malicious shortcut .lnk file. An attacker can exploit this issue by crafting a malicious file and placing it on a Web site or sending it to a user through email followed by enticing them to open it and...