9580 matches found
Microsoft Internet Explorer vulnerable to buffer overflow via FRAME and IFRAME elements
Overview Microsoft Internet Explorer IE contains a buffer overflow vulnerability that can be exploited to execute arbitrary code with the privileges of the user running IE. Description A heap buffer overflow vulnerability exists in the way IE handles the SRC and NAME attributes of HTML elements...
[SA13036] Sun Java System Web Proxy Server Unspecified Buffer Overflow Vulnerabilities
TITLE: Sun Java System Web Proxy Server Unspecified Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA13036 VERIFY ADVISORY: http://secunia.com/advisories/13036/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Sun Java System Web Proxy Server 3.x...
CoD United Offensive boom boom
An update for the Call of Duty bug http://aluigi.altervista.org/adv/codboom-adv.txt The 15th September 2004 has been officially released the expansion pack called United Offensive. It is an expansion pack but uses a new executable that unfortunally has not been fixed for the shutdown bug I report...
BEA WebLogic < 8.1.0 SP 3 Multiple Vulnerabilities
Binary data 2282.prm...
WebLogic < 8.1 SP3 Multiple Vulnerabilities
According to its banner, the remote web server is BEA WebLogic version 8.1 SP2 or older. There are multiple vulnerabilities in such versions that may allow unauthorized access on the remote host or to get the content of the remote JSP scripts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
What A Drag! -revisited-
Most people i talked to consider the Internet Explorer drag and drop vulnerability found by http-equiv not as a serious problem, because it requires some user interaction and the press pushes this topic way to much as the "first security problem in SP2". In an article on BetaNews even Microsoft...
IBM DB2 9.1 < 9.1 Fix Pack 7 / 9.5 < 9.5 Fix Pack 4 Multiple Vulnerabilities
Binary data 5043.prm...
IBM DB2 9.1 < 9.1 Fix Pack 7 Information Disclosure
Binary data 5006.prm...
Immunity Canvas: SVNDATE
Name| svndate ---|--- CVE| CVE-2004-0397 Exploit Pack| CANVAS Description| Subversion = 1.0.2 utf-8 Apache2/WebDAV stack vs. heap exploit Notes| CVE Name: CVE-2004-0397 VENDOR: Collabnet OSVDB: http://osvdb.org/displayvuln.php?osvdbid=6301 Repeatability: Multiple tries References:...
ISA Server 2000 Service Pack 2 Release Notes
ISA Server 2000 Service Pack 2 Release Notes SUMMARY Microsoft Internet Security and Acceleration ISA Server 2000 Service Pack 2 SP2 includes all the hotfixes and security bulletins that are released for ISA Server 2000, including all the hotfixes and security bulletins that were released as part...
BEA WebLogic Server contains a vulnerability in the URL pattern matching
Overview There is a vulnerability in the URL pattern matching functionality of BEA WebLogic Server that could allow URL restrictions to be bypassed. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating, securing, and...
BEA WebLogic Server fails to properly associate the user identity on subsequent client connections
Overview BEA WebLogic Server fails to properly associate a user's identity when a client attempts to connect multiple times using different client certificates. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating,...
Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001
-- Security Advisory -- Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 -- Author: Ory Segal , Sanctum inc. http://www.SanctumInc.com -- Release Date: April 5th. 2004 -- Product: Microsoft SharePoint Portal Server 2001 -- Severity: High -- CVE: CAN-2004-0379 -- Description...
Immunity Canvas: MS04_007
Name| ms04007 ---|--- CVE| CVE-2003-0818 Exploit Pack| CANVAS Description| ASN.1 bitstring decoding exploit Notes| References: http://www.eeye.com/html/Research/Advisories/AD20040210-2.html CVE Name: CVE-2003-0818 VENDOR: Microsoft MSADV: MS04-007 Repeatability: Single shot Date public: Not publi...
Immunity Canvas: NAIMAS32
Name| naimas32 ---|--- CVE| CVE-2004-0095 Exploit Pack| CANVAS Description| Naimas32 Notes| CVE Name: CVE-2004-0095 VENDOR: McAfee CVE Url: https://vulners.com/cve/CVE-2004-0095 CVSS: 5.0...
Immunity Canvas: EZNET
Name| eznet ---|--- CVE| CVE-2003-1339 Exploit Pack| CANVAS Description| eznet Notes| References: 'http://www.ezmeeting.com/Products.html', 'http://www.elitehaven.net/ezstackoverflow.txt' CVE Name: CVE-2003-1339 VENDOR: EZMeeting Date public: 12/07/2003 CERT Advisory: CVE Url:...
Immunity Canvas: MSXEXCH50
Name| msxexch50 ---|--- CVE| CVE-2003-0714 Exploit Pack| CANVAS Description| MS Exchange 2000 XEXCH50 integer overflow ms03-046 Notes| CVE Name: CVE-2003-0714 VENDOR: Microsoft MSADV: MS03-046 MSRC: http://www.microsoft.com/technet/security/bulletin/ms03-046.asp NOTE: CVE Url:...
Microsoft Windows Messenger Service - Denial of Service (MS03-043)
/ DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger Service does not properly validate the length of a message before...
Microsoft IIS 404 Response Service Pack Signature
The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...
