9426 matches found
CVE-2004-0184
Integer underflow in the isakmpidprint for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as...
CVE-2003-0648
Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code...
CVE-2004-0158
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to 1 editor.c, 2 theme.c, 3 manager.c, 4 config.c, 5 game.c, 6 levels.c, or 7 main.c...
CVE-2004-1854
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet...
Unreal Tournament Server Detection
The remote host is running a version of Unreal Tournament Server. The Server is used to host Internet and Local Area Network LAN games. %NASLMINLEVEL 70300 Copyright C 2004 Tenable Network Security include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid12115;...
CVE-2003-1018
CVE-2003-1018 is a format-string vulnerability in the enq command on AIX 4.3, 5.1, and 5.2 that allows local users with rintq group privileges to gain privileges via unspecified vectors. Connected Nessus entries indicate the issue is addressed by vendor patches: AIX 5.2 IY45329 and AIX 5.1 IY4625...
CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin...
[SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390)
-------------------------------------------------------------------------- Debian Security Advisory DSA 442-1 [email protected] http://www.debian.org/security/ Martin Schulze February 19th, 2004 http://www.debian.org/security/faq -...
CVE-2004-0062
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity...
CVE-2004-0060
WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...
CVE-2003-0965
Cross-site scripting XSS vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities...
Red-M Red-Alert Multiple Vulnerabilities
Red-M Red-Alert Multiple Vulnerabilities Product: RedAlert Versions Affected: Tested with hardware version 2.7.5, software v3.1 build 24 Status: Fixed by vendor Vendor URL: http://www.red-m.com Advisory URL: http://genhex.org/releases/031003.txt Author: Bruno Morisson [email protected] Timeline...
CVE-2004-2073
Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command...
FreeBSD-SA-04:01.mksnap_ffs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:01.mksnapffs Security Advisory The FreeBSD Project Topic: mksnapffs clears file system options Category: core Module: mksnapffs Announced: 2004-01-30 Credits:...
CGI bugs
No description provided...
WILDTANGENT detection
The remote host is using the WILDTANGENT program. You should ensure that : - the user intended to install WILDTANGENT it is sometimes silently installed - the use of WILDTANGENT matches your corporate mandates and security policies. To remove this sort of software, you may wish to check out...
SAHAGENT Detection
The remote host is using the SAHAGENT program. You should ensure that : - the user intended to install SAHAGENT it is sometimes silently installed - the use of SAHAGENT matches your Corporate mandates and Security Policies. To remove this sort of software, you may wish to check out ad-aware or...
CVE-2004-0042
CVE-2004-0042 concerns vsftpd 1.1.3, where the login error messages differ based on whether a supplied username exists. The underlying effect is information disclosure: remote attackers can determine valid usernames on the server. The available connected sources corroborate the version (vsftpd 1....
[SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 421-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 12th, 2004 http://www.debian.org/security/faq -...