CVE-2002-1971

The ping utility in networkingutils.php in Sourcecraft NetworkingUtils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument...

CVE-2002-1877

NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname...

CVE-2002-1877

The CVE-2002-1877 entry describes a vulnerability in the NETGEAR FM114P where remote attackers can bypass site access restrictions by requesting a URL formed with an IP address instead of a hostname. Affected product: NETGEAR FM114P. The impact is stated as bypassing access controls for web sites...

CVE-2002-1962

The CVE concerns Finjan Software SurfinGate 6.0 and 6.0 1. The vulnerability allows remote attackers to bypass URL access restrictions by sending a URL that uses an IP address instead of a hostname, defeating host-based filtering. Impact is described as partial for confidentiality, integrity, and...

CVE-2002-1962

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...

CVE-2002-1839: Undefined Security Weakness

Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message...

CVE-2002-1962: Undefined Security Weakness

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...

Webhints 1.03 - Remote Command Execution (C) (2)

Webhints 1.03 - Remote Command Execution C 2 / T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR : WebHints Remote C0mmand Execution Vuln Coded By: A l p h a P r o g r a m m e r Sirus-v E-Mail: [email protected] This Xpl Upload a Page in Vulnerable Directory , You ca...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

CVE-2005-1680

D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication 1 if their IP address already exists in /var/tmp/fwip or 2 if their request is the first, which causes /var/tmp/fwip to be created and contain their IP addre...

CVE-2004-2079: Undefined Security Weakness

Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user...

CVE-2005-1646

The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of...

CVE-2004-1802

CVE-2004-1802 affects Chat Anywhere 2.72 and earlier. A remote attacker can hide their true IP address by sending %00 before the nickname, causing the IP to be displayed as $IP$ on the administration web page. This detail is supported by CVE records (CVE-2004-1802) and related databases. No addit...

CVE-2004-1802

Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page...

CVE-2004-1850

The Rage 1.01 and earlier allows remote attackers to cause a denial of service infinite loop via a TCP packet with the port and IP address set to zero...

CVE-2004-1950

phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses...

CVE-2004-1802: Undefined Security Weakness

Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page...

CVE-2005-0328

Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtain the IP address of the LAN side interface by pinging a valid LAN IP address, which generates an ARP reply from the WAN address side that maps the LAN IP address to the WAN's MA...

CVE-2004-1487

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...

DEBIAN-CVE-2004-1487

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...