647 matches found
security flaw
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups...
CVE-2004-1950
The CVE documents a vulnerability in phpBB 2.0.8a and earlier where the application trusts the IP address provided in the X-Forwarded-For HTTP header. This mis-trust lets remote attackers spoof the user’s apparent IP address. Affected software: phpBB 2.0.8a and older. Root cause: server-side code...
Vulnerability in Coppermine Photo Gallery 1.3.*
+-----------------------------------------+ | RST/GHC Coppermine ADVISORY | | Product: Coppermine Photo Gallery | | Version: 1.3.x | | URL: http://coppermine.sourceforge.net/ | +-----------------------------------------+ Product Description "Coppermine Photo Gallery is a picture gallery script...
coppermine -- IP spoofing and XSS vulnerability
GHC team reports about coppermine The lack of sanitizing of user defined variables may result in undesirable consequences such as IP spoofing or XSS attack. Generally users of Coppermine Gallery can post comments. Remote address & x-forwarded-for variables are logged for admin's eyes...
Debian DSA-124-1 : mtr - buffer overflow
The authors of mtr released a new upstream version, noting a non-exploitable buffer overflow in their ChangeLog. Przemyslaw Frasunek, however, found an easy way to exploit this bug, which allows an attacker to gain access to the raw socket, which makes IP spoofing and other malicious network...
Invision Power Board (IP.Board) < 1.3.1 - Design Error
IP.Board Design Error Vendor: Invision Power Services Product: IP.Board Version: = 1.3.1 Website: http://www.invisionpower.com/ BID: 10559 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage ...
Invision Power Board (IP.Board) 1.3.1 - Design Error
Invision Power Board IP.Board 1.3.1 - Design Error IP.Board Design Error Vendor: Invision Power Services Product: IP.Board Version: = 1.3.1 Website: http://www.invisionpower.com/ BID: 10559 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up...
phpBB 2.0.8a and lower - IP spoofing vulnerability
Advisory Name : phpBB 2.0.8a and lower - IP spoofing vulnerability Release Date : Apr 18, 2004 Application : phpBB Version : phpBB 2.0.8a and previous versions Platform : PHP Vendor URL : http://www.phpbb.com/ Author : Wang / SRR Project Group of Ready Response [email protected] Overview A...
CVE-2002-0714
The advisory scope confirms that CVE-2002-0714 affects the Squid FTP proxy prior to 2.4.STABLE6, where the FTP control and data channel addresses were not compared to the FTP server’s address. This allowed remote attackers to bypass firewall rules or spoof FTP server responses. Multiple connected...
NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability
NSSI Technologies Inc Research Labs Security Advisory http://www.nssolution.com Philippines / .ph "Maximum e-security" http://nssilabs.nssolution.com ZoneAlarm Pro 3.1 and 3.0 Denial of Service Vulnerability Author: Abraham Lincoln Hao / SunNinja e-Mail: [email protected] /...
NSSI-2002-sygatepfw5: Sygate Personal Firewall IP Spoofing Vulnerability
NSSI-Research Labs Security Advisory http://www.nssolution.com Philippines / .ph "Maximum e-security" http://nssilabs.nssolution.com Sygate Personal Firewall 5.0 IP Spoofing Vulnerability Author: Abraham Lincoln Hao / SunNinja e-Mail: [email protected] / [email protected] Advisory Code:...
[SECURITY] [DSA 124-1] New mtr packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 124-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2002 - -------------------------------------------------------------------------- Package : mtr...
mtr 0.45, 0.46
Few days ago, a new version of mtr has been released. Authors wrote in CHANGELOG, that they fixed a non-exploitable buffer overflow. In fact, this vulnerability is very easly exploitable and allows attacker to gain access to raw socket, which makes possible ip spoofing and other malicious network...
CVE-2001-0908
Technical details about CVE-2001-0908 are not publicly available in the provided connected documents. The initial description summarizes the issue (Citrix Metaframe 1.8 logs client IP, enabling spoofing) but no specifics on affected versions, exploit, or fixes are provided. Monitor for updates.
CVE-2001-1556
The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep...
HERT advisory: FreeBSD IP Spoofing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - --------------------------------------------------------------- HERT - Hacker Emergency Response Team [email protected] - http://hert.org Advisory: 00003 Title: FreeBSD IP Spoofing Date: 1st October 2000 Summary: IP Spoofing Sequence number predictio...
Дырка в FreeBSD (IP Spoofing)
Алгоритм генерации псевдо-случайной последовательности позволяет по трем пакетам определить состояние генератора псевдо-случайно последовательности используемого при задании номеров последовательностей и воспроизвести его на удаленной машине, что позволяет перезватить любое TCP-соединение...
Check Point Software Firewall-1 3.0/1.4.0/1.4.1 - Spoofed Source Denial of Service
// source: https://www.securityfocus.com/bid/1419/info If Checkpoint Firewall-1 receives a number of spoofed UDP packets with Source IP = Destination IP, the firewall and likely the machine hosting it crashes. NOTE: This vulnerability while being posted to Bugtraq is currently being denied as a...
CVE-1999-0667
CVE-1999-0667 describes an ARP spoofing vulnerability: any host can spoof ARP replies to poison ARP caches, enabling IP address spoofing and denial of service. The issue affects ARP processing and is consistently described across sources (NVD, Red Hat, CIRCL, CVE lists) as allowing spoofed ARP re...
