Microsoft Internet Explorer WMF Image Parsing Memory Corruption Vulnerability

Description Microsoft Internet Explorer is affected by an WMF image-parsing memory-corruption vulnerability. This issue is allegedly due to an integer-overflow flaw that leads to corrupted heap memory. This problem presents itself when a user views a malicious WMF-formatted file containing...

CVE-2005-4713

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

AMSN instant messenger data spoofing

Port with predictable number is open for file retrieval without check for peer IP address...

linux/x86 Connect Back shellcode 90 bytes

Exploit for linux/x86 platform in category shellcode ========================================= linux/x86 Connect Back shellcode 90 bytes ========================================= /--------------------------------------------------------------------------- 90 byte Connect Back shellcode by Russell...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 exposes user IP addresses via a Showip parameter in the chat applet. The underlying issue is an information disclosure that allows one chat user to obtain another user’s IP, constituting a partial confidentiality impact (IP leakage). The available sources confir...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...

CVE-2002-2181

The CVE-2002-2181 entry describes a vulnerability in SonicWall Content Filtering where local users can access prohibited web sites by sending requests to a site’s IP address rather than using the domain name. The connected SonicWall PSIRT entry (SNWLID-2002-0001) mirrors this by stating that IP a...

The most classic hack introductory textbook-vulnerability warning-the black bar safety net

The first section, hack the type and behavior of the To my understanding, the“hackers”generally should be divided into“positive”and“evil”Categories, the decent hackers rely on their own knowledge to help system administrators to identify system vulnerabilities and be improved, while the evil...

NAI PGP Cert Server DoS

It was possible to make the remote PGP Cert Server crash by spoofing a TCP connection that seems to come from an unresolvable IP address. OpenVAS Vulnerability Test $Id: PGPCertDoS.nasl 6040 2017-04-27 09:02:38Z teissa $ NAI PGP Cert Server DoS Authors: John Lampe [email protected] Changes by ...

How could an attacker use the“IP address spoofing” break through the firewall system? (Figure)-vulnerability warning-the black bar safety net

General access control is mainly in the firewall settings, develop a security policy: e.g. internal LAN resources do not allow external Internet users to use; not fortified areaknown as the demilitarized zonecan be for internal or external local area network, wherein the resource allows the...

Private IP address leaked in HTTP headers

This web server leaks a private IP address through its HTTP headers. SPDX-FileCopyrightText: 2001 Alert4Web.com, 2003 Westpoint Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

F5 BIG-IP Cookie Remote Information Disclosure

The remote host appears to be an F5 BIG-IP load balancer. The load balancer encodes the IP address of the actual web server that it is acting on behalf of within a cookie. Additionally, information after 'BIGipServer' is configured by the user and may be the logical name of the device. These valu...

CVE-2005-3176

Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...

CVE-2005-3176

Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...

CVE-2005-3176

CVE-2005-3176: Affects Microsoft Windows 2000 (before Update Rollup 1 for SP4). The issue is that the IP address of a Windows Terminal Services client is not recorded in a security log event when the client connects successfully, which could help an attacker evade detection. Connected documents c...

RHEL 4 : wget (RHSA-2005:771)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:771 advisory. GNU Wget is a file retrieval utility that can use either the HTTP or FTP protocols. A bug was found in the way wget writes files to the local...

smf105.txt

Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...

Microsoft IIS 5.0 - 500-100.asp Server Name Spoof

Microsoft IIS 5.0 - 500-100.asp Server Name Spoof / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof P...

CVE-2002-2103

CVE-2002-2103 affects Apache before 1.3.24. When writing to the log file, Apache may record a spoofed hostname from reverse DNS for an IP address, even if a double-reverse lookup fails, allowing remote attackers to hide the original source of activities. The provided documents do not include expl...