8618 matches found
CVE-2002-1923
The CVE-2002-1923 entry concerns MySQL server versions 3.20.32–3.23.52 on Windows where the default configuration does not enable logging. The lack of logging could allow remote activity to occur without detection. According to connected sources, this is part of a set of weak defaults (with CVEs ...
CVE-2001-1500
ProFTPD 1.2.2rc2 (and possibly other versions) is affected by a DNS validation issue where reverse-resolved hostnames are not properly verified via forward resolution. This can allow remote attackers to bypass access control lists or log an incorrect client hostname. The available connected docum...
CVE-2000-1226
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service crash by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan...
CVE-2005-1728
MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, allowing local users to obtain credentials. Affected component: MCX Client; impact: credential disclosure to local users; root cause: insecure logging. No remediation details provided in the sup...
CVE-2005-1728
MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows local users to obtain the credentials...
CVE-2004-1891
The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...
CVE-2004-1854
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet...
Oracle Database 9i/10g Fine Grained Auditing (FGA) SELECT Statement Logging Weakness
The remote host is running a version of Oracle Database that, according to its version number, suffers from a flaw in which Fine Grained Auditing FGA becomes disabled when the user SYS runs a SELECT statement. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Oops! proxy format string vulnerability
Format string bug during database logging...
Oracle Application Server < 10.1.0.0.4 Logging Service Interruption
Binary data 2882.prm...
Oracle 9i/10g - Database Fine Grained Audit Logging Failure
source: https://www.securityfocus.com/bid/13510/info Oracle 9i/10g Database is prone to a logging failure vulnerability that exists in Fine Grained Audit FGA functionality. Reports indicate that FGA may be disabled inadvertently, without notifying the database administrator. This results in FGA...
Oracle 9i10g - Database Fine Grained Audit Logging Failure
Oracle 9i10g - Database Fine Grained Audit Logging Failure source: https://www.securityfocus.com/bid/13510/info Oracle 9i/10g Database is prone to a logging failure vulnerability that exists in Fine Grained Audit FGA functionality. Reports indicate that FGA may be disabled inadvertently, without...
CVE-2005-0906
Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code...
CVE-2005-0050
The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, aka the...
Immunity Canvas: MS05_010
Name| ms05010 ---|--- CVE| CVE-2005-0050 Exploit Pack| CANVAS Description| Microsoft License Logging Service Buffer Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-010.mspx CVE Name: CVE-2005-0050 CVE Url: https://vulners.com/cve/CVE-2005-0050 CVSS: 10.0 Note:...
Novell secure logging and auditing product DoS
No description provided...
coppermine -- IP spoofing and XSS vulnerability
GHC team reports about coppermine The lack of sanitizing of user defined variables may result in undesirable consequences such as IP spoofing or XSS attack. Generally users of Coppermine Gallery can post comments. Remote address & x-forwarded-for variables are logged for admin's eyes...
Tincat Network Library - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12912/info Tincat is reported prone to a remote buffer overflow vulnerability. It is reported that this issue exists in the function responsible for logging users that have connected to a game server. A successful attack can allow an attacker to gain...
Windows License Logging Service buffer overflow
Buffer overflow during request parsing...
HP-UX FTP daemon is vulnerable to a buffer overflow
Overview The HP-UX FTP daemon ftpd contains a buffer overflow that may allow an unauthenticated, remote attacker to execute arbitrary code. Description The HP-UX FTP daemon ftpd is vulnerable to a buffer overflow when the FTP daemon is configured to log debugging information. Debug logging is...