CVE-2005-2726

CVE-2005-2726 describes a directory traversal vulnerability in Home Ftp Server 1.0.7 that allows remote authenticated users to read arbitrary files by supplying Windows drive-letter paths such as “C:\” in commands like LIST or RETR. The condition is authenticated access; impact is partial disclos...

Multiple Vulnerabilities in Home Ftp Server 1.0.7

Donato Ferrante Application: Home Ftp Server http://downstairs.dnsalias.net/homeserver.html Version: 1.0.7 b45 Bugs: Multiple Vulnerabilities Date: 24-Aug-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

Full path disclosure in CaLogic 1.22 and possible in older versions.

Full path disclosure in CaLogic 1.22 and possible in older versions. Language: PHP Project name: CaLogic Risk: Low Home page: http://www.calogic.de Discovered by: GB & Zetha Explotation examples: http://target/calogic122/doclsqlres.php Fatal error: Call to a member function on a non-object in...

HexView Security Advisory 0405-20-05.05

ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...

CVE-2002-2099

Buffer overflow in the GNU DataDisplay Debugger DDD 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE...

CVE-2002-2099

Buffer overflow in the GNU DataDisplay Debugger DDD 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE...

CVE-2001-1553

Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options 1 socksserver, 2 socksuser, and 3 sockspasswd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be...

CVE-2001-1553

CVE-2001-1553 describes a local buffer overflow in SETI@home 3.03 when the binary is installed setuid. An attacker could trigger arbitrary code execution via overly long command line options (socks_server, socks_user, socks_passwd). The note indicates the default SETI@home configuration is not se...

CVE-2005-1728

MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials...

CVE-2005-1728

MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials...

CVE-2005-1491

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to 1 move their home directory via viewaction.html or 2 move arbitrary files via the importfile parameter to importaction.html...

Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2

ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...

CVE-2005-1019

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable...

CVE-2005-1019

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable...

CVE-2005-1019

CVE-2005-1019 affects Aeon 0.2a and earlier, where a buffer overflow in the getConfig function lets local users gain privileges via a long HOME environment variable. The CVSSv2 base score is 7.2 (HIGH) with Local attack vector and no authentication required; confidentiality, integrity, and availa...

CVE-2003-1118

CVE-2003-1118 describes a buffer overflow in the SETI@home client (3.03 and other versions) that allows a remote attacker to cause a denial of service (client crash) and execute arbitrary code. The attack relies on a spoofed server response containing a long string followed by a newline character...

CVE-2003-1118

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service client crash and execute arbitrary code via a spoofed server response containing a long string followed by a \n newline character...

security flaw

The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service crash via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCPISEEYOU cache numbers...

xpcd PhotoCD viewer buffer overflow

Buffer overflow in xpcd-svga on oversized HOME environment variable...

FVS318.txt

Multiple Vulnerabilities in Netgear FVS318 Router http://www.securinews.com/vuln.htm?vulnid=103 ------------------------------------------------- Overview: The Netgear FVS318 is an easy to use, firewall/router designed for home users and small businesses. SecuriNews Research has found 2...