8834 matches found
CVE-2002-2423
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response...
CVE-2002-1923
The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection...
CVE-2002-1378
Multiple buffer overflows in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allow remote attackers to execute arbitrary code via 1 long -t or -r parameters to slurpd, 2 a malicious ldapfilter.conf file that is not properly handled by getfilter functions, 3 a malicious ldaptemplates.conf that causes an...
zkfingerd SysLog 0.9.1 - Format String
zkfingerd SysLog 0.9.1 - Format String // source: https://www.securityfocus.com/bid/6402/info zkfingerd is prone to a format string vulnerability. This problem is due to incorrect use of the 'syslog' function to log error messages. It is possible to corrupt memory by passing format strings throug...
Remote multiple vulnerability in apt-www-proxy.
======================================== INetCop Security Advisory 2002-0x82-009 ======================================== Title: Remote multiple vulnerability in apt-www-proxy. 0x01. Description bash$ lynx -dump http://ironsides.terrabox.com/ahzz/apt-www-proxy/ apt-www-proxy apt-www-proxy is a...
vBulletin XSS Injection Vulnerability
.:: vBulletin XSS Injection Vulnerability vBulletin is a powerful and widely used bulletin board system, based on PHP language and MySQL database. I discovered lately a Cross-Site Scripting issue that would allow attackers to inject maleficent codes into the pages and execute it on the clients...
APBoard - post threads to protected forums and possibility to hijack forum-password
Product: Another PHP Program - APBoard Versions: tested on 2.02, 2.03 Vulnerability: post threads to protected forums and possibility to hijack forum-password Date: November 12, 2002 Discovered by: ProXy [email protected] Introduction: Normal Users can submit threads to password protected forums a...
Important: Red Hat Security Advisory: : Updated nss_ldap packages fix buffer overflow
Updated nssldap packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3. These updates fix a potential buffer overflow which can occur when nssldap is set to configure itself using information stored in DNS, a format string bug in logging functions used in pamldap, and to properly...
CVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code...
CVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code...
CVE-2002-0979
CVE-2002-0979 concerns the Java logging feature of the JVM in Internet Explorer. The vulnerability arises when the JVM’s logging outputs (e.g., System.out.println) are written to a known pathname, which can be leveraged to execute arbitrary code. The available connected documents confirm the affe...
CVE-2002-0501
Format string vulnerability in logprint function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are inserted into logging messages...
CVE-2002-0796
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges...
LabVIEW Web Server HTTP Get Newline DoS
It was possible to kill the web server by sending a request that ends with two LF characters instead of the normal sequence CR LF CR LF CR = carriage return, LF = line feed. An attacker can exploit this vulnerability to make this server and all LabView applications crash. C Tenable Network...
Inso DynaWeb HTTPd 3.14.0.24.1 - Format String
Inso DynaWeb HTTPd 3.14.0.24.1 - Format String // source: https://www.securityfocus.com/bid/5384/info Inso DynaWeb webserver, dwhttpd, is used as a subcomponent in products such as Sun's AnswerBook2, which is shipped as part of the Solaris operating environment. The dwhttpd webserver is prone to ...
CVE-2002-0796
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges...
Format string bugs in mmmail/mmftpd
Format string bugs in logging...
XMB Forum 1.6 - Magic Lantern Log File
XMB Forum 1.6 - Magic Lantern Log File source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable...
XMB Forum 1.6 - Magic Lantern Log File
source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable to index.php. Log information is writt...