9424 matches found
CVE-2003-0984
Real time clock RTC routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space...
CVE-2003-1414
Directory traversal vulnerability in parsexml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Server 4.1.1 allows remote attackers to read arbitrary files via a ... triple dot in the filename parameter...
CVE-2003-1500
PHP remote file inclusion vulnerability in functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter...
phpBB 2.0.6 - search_id SQL Injection MD5 Hash
phpBB 2.0.6 - searchid SQL Injection MD5 Hash !/usr/bin/perl -w use IO::Socket; PROOF-OF-CONCEPT work only with mysql ver 4.0 work only with post 1 Example: C:\r57phpbb-poc.pl 127.0.0.1 phpBB2 2 2 prepare to connect... + connected prepare to send data... + OK wait for response... + MD5 Hash for...
DNS Server Fingerprinting
This script attempts to identify the remote DNS server type and version by sending various invalid requests to the remote DNS server and analyzing the error codes returned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script is a very crude attempt at doing DNS fingerprinting...
CVE-2003-0856
iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface...
CVE-2003-0970
The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service packet loss via ARP packets, which cause all ports to become temporarily disabled...
OS Identification : ICMP
This plugin attempts to identify the Operating System type and version by sending more or less incorrect ICMP requests using the techniques outlined in Ofir Arkin's paper 'ICMP Usage In Scanning'. An attacker may use this to identify the kind of the remote operating system and gain further...
OS Identification
Using a combination of remote probes e.g., TCP/IP, SMB, HTTP, NTP, SNMP, etc., it is possible to guess the name of the remote operating system in use. It is also possible sometimes to guess the version of the operating system. %NASLMINLEVEL 70300 C Tenable, Inc. @@NOTE: The output of this plugin...
CVE-2003-0886
Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code...
HMAP Web Server Fingerprinting
Nessus was able to identify the remote web server type by sending several valid and invalid HTTP requests. In some cases, its version can also be approximated, as well as some options. C Tenable Network Security, Inc. Redistribution and use in source, with or without modification, are permitted...
CVE-2003-0855
Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...
CVE-2003-0792
Fetchmail 6.2.4 and earlier does not properly allocate memory for long lines, which allows remote attackers to cause a denial of service crash via a certain email...
CVE-2003-0707
Buffer overflow in LinuxNode node before 0.3.2 allows remote attackers to execute arbitrary code...
CVE-2003-0681
...
CVE-2003-0762
Buffer overflow in 1 foxweb.dll and 2 foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL PATHINFO value...
CVE-2003-0546
up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised...
CVE-2003-0549
The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash via a short authorization key name...
DEBIAN-CVE-2003-0516
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...