Apache Tomcat /status Information Disclosure

Binary data 1462.prm...

RHEL 2.1 : kernel (RHSA-2004:418)

Updated kernel packages that fix potential information leaks and a incorrect driver permission for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered flaws in the Linux kernel when handling file offset...

Bugzilla < 2.16.6 / 2.18rc1 Multiple Vulnerabilities (XSS, SQLi, Priv Esc, more)

The remote Bugzilla bug tracking system, according to its version number, is vulnerable to various flaws : - An administrator may be able to execute arbitrary SQL commands on the remote host. - There are instances of information leaks that may let an attacker know the database password under...

Linksys - DHCP Information Disclosure

// source: https://www.securityfocus.com/bid/10329/info It has been reported that the built-in DHCP server on these devices are prone to an information disclosure vulnerability. When attempting to exploit this issue, it has been reported that a denial of service condition may occur, stopping...

CVE-2004-0222

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service memory exhaustion via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0222

OpenBSD isakmpd (3.4 and earlier) is affected by memory-leak vulnerabilities in ISAKMP packet processing, allowing remote attackers to exhaust memory and cause a denial-of-service. The issue is described in Rapid7 R7-0018 and CERT/OpenBSD advisories, with references to multiple CVEs (CAN-2004-021...

CVE-2004-0222

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service memory exhaustion via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite...

PT-2004-1387 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD versions 3.4 and earlier Description: The issue is related to multiple memory leaks in the isakmpd component, which can be exploited by remote attackers to cause a denial of service due to memory exhaustion. This can be achieved by...

X-Cart vulnerability

X-Cart ttp://www.x-cart.comis a well distributed PHP e-commerce solution. We have discovered some security related bugs in X-Cart Version 3.4.3. It is possible that other versions are vulnerable too. Any visitor can view any file on the web server. This URL my be used as proof of concept:...

xcart343.txt

X-Cart ttp://www.x-cart.comis a well distributed PHP e-commerce solution. We have discovered some security related bugs in X-Cart Version 3.4.3. It is possible that other versions are vulnerable too. Any visitor can view any file on the web server. This URL my be used as proof of concept:...

CVE-2003-0465

The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks...

CVE-2003-0465

The CVE-2003-0465 issue affects the Linux kernel (2.4/2.5) where strncpy does not pad with null bytes on architectures other than x86, potentially allowing information leaks. Red Hat’s RHSA-2004:188 and related advisories document this as a kernel vulnerability with fixes in updated kernel packag...

pMachine 1.02.x - Multiple Script sfx Full Path Disclosures

pMachine 1.02.x - Multiple Script sfx Full Path Disclosures source: https://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script, possibly requiring...

CVE-2003-0393

Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans...

CVE-2002-1094

Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the 1 SSH banner, 2 FTP banner, or 3 an incorrect HTTP request...

Important: Red Hat Security Advisory: : Updated libpng packages fix buffer overflow

Updated libpng packages are available that fix a buffer overflow vulnerability. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. Versions of libpng prio...

Important: Red Hat Security Advisory: libpng security update

Updated libpng packages are available that fix a buffer overflow vulnerability. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. Versions of libpng prio...

[CLA-2002:512] Conectiva Linux Security Announcement - libpng

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : libpng SUMMARY : Buffer overflow vulnerability DA...

Buffer overflows and multiple bugs in squid

Buffer overflow on ftp:// URLs, memory leaks, etc...

CVE-2002-0419

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...