1248 matches found
Apache Httpd < 2.0.55 : PCRE overflow
An integer overflow flaw was found in PCRE, a Perl-compatible regular expression library included within httpd. A local user who has the ability to create .htaccess files could create a maliciously crafted regular expression in such as way that they could gain the privileges of a httpd child...
Apache PCRE Integer Overflow Vulnerability
Secunia Advisory: SA16688 Release Date: 2005-09-05 Critical: Less critical Impact: Privilege escalation Where: Local system Solution Status: Vendor Patch Software: Apache 2.0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference:...
Simple PHP Blog 0.4.0 - Multiple Remote s
!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...
sphpblog_vulns.pl.txt
!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...
[cosmoshop <= 8.10.78] be the shopadmin in one step
author : l0om innate| @t | gmx.de WWW.EXCLUDED.ORG product: cosmoshop version: = 8.10.78 problem: 1. sql injection 2. cleartext passwords 3. view any file maunuf.: www.cosmoshop.de what is cosmoshop cosmoshop is a comercial shop system written as a CGI. where is the problem 1. sql injection...
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess restrictions defined in httpd.conf with directives like Deny From All by using an ErrorDocument directive. The Red Hat and CVE records confirm this is the same issue; vendor dispute noted that .htaccess applies to extern...
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restri...
osCommerce Unprotected Admin Directory
The installation of osCommerce on the remote host apparently lets anyone access the application's admin directory, which means that they have complete administrative access to the site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
osCommerce update.php readme_file Parameter Arbitrary File Disclosure
The osCommerce installation on the remote host has a supplementary script, 'extras/update.php', that fails to validate user-supplied input to the 'readmefile' parameter before using that to display a file. An attacker can exploit this flaw to read arbitrary files on the remote host, such as the...
eping.txt
www.RedC0de.org found the following error in eping: Details ------- Advisory name: Arbitrary code execution in eping plugin Advisory number: 1 Application: eping Aplication author: apnovi3 Security-Risk: high - very high Remote-Exploit: Yes Discovered by: m00fd1 aka Tr|p Introduction ------------...
PHP Stat Administrative User Authentication Bypass
=========================================================== ============================================================ Title: PHP Stat Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 25/05/2005 Severity: Medium. PHP Stat Administrative User Authentication...
Annuaire Netref v4.2 [ fwrite php ] vulnerability
Software: annuaire netref version : 4.2 url : http://www.netref.net Risk factor : critical Vendor has been contacted Description: ----------- Netref is a PHP/MySQL-based directory script that supports an unlimited number of categories and links. Many fonctions to manage the links : Fast search...
CVE-2004-2576
class.vfsdav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files...
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restri...
PT-2004-3237 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.0.47 and earlier Description: The issue allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. It is noted...
CVE-2004-0747
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables...
DEBIAN-CVE-2004-0747
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables...
CVE-2004-0747
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables...
PT-2004-2511 · Cpanel · Cpanel
Name of the Vulnerable Software and Affected Versions: cPanel version 9.4.1-RELEASE-64 Description: The issue allows local users to read arbitrary files via the backup feature or chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled. This is due to the...
