FileCOPA FTP Server 1.01 - USER Remote Denial of Service

FileCOPA FTP Server 1.01 - USER Remote Denial of Service FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6 April 2006 BY Bigeazer http://blacksecurity.org They are selling this software for $39.95... oh well.. maybe they shoud fix it first? It appears that FileCop...

bogofilter -- heap corruption through excessively long words

Matthias Andree reports: Bogofilter's/bogolexer's input handling in version 0.96.2 was not keeping track of its output buffers properly and could overrun a heap buffer if the input contained words whose length exceeded 16,384 bytes, the size of flex's input buffer. A "word" here refers to a...

Annuaire Netref v4.2 [ fwrite php ] vulnerability

Software: annuaire netref version : 4.2 url : http://www.netref.net Risk factor : critical Vendor has been contacted Description: ----------- Netref is a PHP/MySQL-based directory script that supports an unlimited number of categories and links. Many fonctions to manage the links : Fast search...

PHP-Nuke 7.4 WebLinks SQL-Injection

Version: 7.4 Module: WebLinks function: TopRated //...... function TopRated$ratenum, $ratetype //........ if $ratenum != "" && $ratetype != "" $toplinks = $ratenum; //........... $result = $db-sqlquery"SELECT lid, cid, sid, title, description, date, hits, linkratingsummary, totalvotes,...

Stormy Studios KNet 1.x - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/12671/info A remote buffer overflow vulnerability affects Stormy Studios KNet. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers. An attacker may leverage this issue to execute arbitrary...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:011)

iDefense discovered that the PNATAG handling code in pnmgetchunk does not check if the input size is larger than the buffer size CVE-2004-1187. As well, they discovered that in this same function, a negative value could be given to an unsigned variable that specifies the read length of input data...

CVE-2004-2572

AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering 1 invalid characters such as "" or 2 a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldapsearch...

greed -- insecure GRX file processing

A buffer overflow vulnerability has been detected in the greed URL handling code. This bug can especially be a problem when greed is used to process GRX GetRight files that originate from untrusted sources. The bug finder, Manigandan Radhakrishnan, gave the following description: Here are the bug...

PHP-Fusion Database Multiple Vulnerabilities

Binary data 2352.prm...

Debian DSA-144-1 : wwwoffle - improper input handling

A problem with wwwoffle has been discovered. The web proxy didn't handle input data with negative Content-Length settings properly which causes the processing child to crash. It is at this time not obvious how this can lead to an exploitable vulnerability; however, it's better to be safe than...

Debian DSA-165-1 : postgresql - buffer overflows

Mordred Labs and others found several vulnerabilities in PostgreSQL, an object-relational SQL database. They are inherited from several buffer overflows and integer overflows. Specially crafted long date and time input, currency, repeat data and long timezone names could cause the PostgreSQL serv...

Gemitel 3.50 - affich.php Remote File Inclusion Command Injection

Gemitel 3.50 - affich.php Remote File Inclusion Command Injection source: https://www.securityfocus.com/bid/10156/info A vulnerability has been identified in the handling of input by Gemitel. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the...

Andys PHP Projects Man Page Lookup Script - Information Disclosure

Andys PHP Projects Man Page Lookup Script - Information Disclosure source: https://www.securityfocus.com/bid/9395/info A problem in the handling of user-supplied input by Andy's PHP Projects Man Page Lookup script has been reported. Because of this, it is possible for an attacker to gain...

Andy's PHP Projects Man Page Lookup Script - Information Disclosure

source: https://www.securityfocus.com/bid/9395/info A problem in the handling of user-supplied input by Andy's PHP Projects Man Page Lookup script has been reported. Because of this, it is possible for an attacker to gain unauthorized access to sensitive information on a system...

DansGuardian 2.2.x - Denied URL Cross-Site Scripting

DansGuardian 2.2.x - Denied URL Cross-Site Scripting source: https://www.securityfocus.com/bid/8876/info A problem has been reported in the handling of some types of input to DansGuardian. This problem may permit an attacker to launch cross-site scripting attacks...

DansGuardian 2.2.x - Denied URL Cross-Site Scripting

source: https://www.securityfocus.com/bid/8876/info A problem has been reported in the handling of some types of input to DansGuardian. This problem may permit an attacker to launch cross-site scripting attacks...

[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 395-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 395-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2003 http://www.debian.org/security/faq -...

DSA-395 tomcat4 - incorrect input handling

Bulletin has no description...

Moozatech: WZFTPD Denial Of Service

23/09/03 Moozatech Advisory http://www.moozatech.com/mt-23-09-2003.txt ------------------------------------------------------- Application: wzdftpd FTP Server Web Site: http://www.wzdftpd.net Versions: 0.1rc5 Platform: Windows 2000,WindowsXP,UNIX systems might also be affected. Risk: Remote DOS...