quickDoS.txt

Details: ======== Input to the user commands is not properly checked and/or filtered. Issuing a long argument to the user about 1024 caracteres commands will cause the corresponding process to die without any error message. this vulnerabilities exist in both the professionnal version 3.0 and lite...

Quick 'n EasY 3.0 FTP Server - Remote Denial of Service

/ Quick'n Easy FTP Server 3.0 pro and lite Remote D.o.S Exploit by Kozan Based on matiteman's code in perl Application: Quick 'n Easy FTP Server 3.0 pro and lite Vendor: www.pablosoftwaresolutions.com Discovered by: matiteman Exploit Coded by: Kozan Credits to ATmaCA, matiteman Web:...

Arbitrary code execution in SlimFTPd v3.16

Arbitrary code execution in SlimFTPd v3.16 discovered by Raphal Rigo Product: SlimFTPd by WhitSoft Development Affected Version: 3.16 verified, =3.16 probably too Not affected Version: 3.17 OS affected: All Win32 Risk: Critical Remote Exploit: yes URL: http://www.whitsoftdev.com/slimftpd/ Overvie...

CVE-2005-2169

Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, which are reduced to "../" when PHPSource Printer uses a regular expression to remove "../" sequences...

CVE-2005-2169

CVE-2005-2169 is a directory traversal vulnerability in Quick & Dirty PHPSource Printer 1.1 and earlier. The flaw allows remote attackers to read arbitrary files by supplying evil ".../...//" sequences in the file parameter, which are reduced to "../" by a regex, enabling access to parent directo...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...

PT-2005-2567 · Quick.Cart · Quick.Cart

Name of the Vulnerable Software and Affected Versions: Quick.cart version 0.3.0 Description: The issue concerns a potential SQL injection vulnerability in the index.php file of Quick.cart, allegedly allowing remote attackers to execute arbitrary SQL commands via the iCategory parameter. However,...

CVE-2005-0129

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected...

CVE-2002-1647

The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL...

CVE-2002-1647

Technical details are not publicly available in the provided documents. Monitor for updates.

MDKSA-2005:057 - Updated gnupg packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gnupg Advisory ID: MDKSA-2005:057 Date: March 15th, 2005 Affected versions: 10.0, 10.1, 9.2, Corporate 3.0, Corporate Server 2.1 Problem Description: The OpenPGP protocol is vulnerable to a...

Mandrake Linux Security Advisory : gnupg (MDKSA-2005:057)

The OpenPGP protocol is vulnerable to a timing-attack in order to gain plain text from cipher text. The timing difference appears as a side effect of the so-called 'quick scan' and is only exploitable on systems that accept an arbitrary amount of cipher text for automatic decryption. The updated...

GLSA-200501-34 : Konversation: Various vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-34 Konversation: Various vulnerabilities Wouter Coekaerts has discovered three vulnerabilities within Konversation: The Server::parseWildcards function, which is used by the 'Quick Buttons', does not properly handle variabl...

CVE-2005-0131

The CVE-2005-0131 entry concerns Konversation 0.15. The Quick Connection dialog erroneously uses the user’s password as the nickname when connecting to an IRC server, which can leak the password to other users. This is tied to the Konversation IRC client and stems from the login handling in the Q...

CVE-2005-0129

CVE-2005-0129 affects Konversation 0.15. The Quick Buttons feature allows remote attackers to cause execution of certain IRC commands via a channel name containing "%" variables, which are recursively expanded by Server::parseWildcards when the Part Button is selected. Root cause: improper handli...

CVE-2005-0129

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected...

konversation irc client 0.15 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/12312/info Konversation is a freely available IRC client for KDE windows environments on Linux platforms. Multiple remote vulnerabilities affect the Konversation IRC client. These issues are due to input validation failures and design flaws. The first iss...

CVE-2004-2747

Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...

Quick 'n EasY 2.4 FTP Server - Remote Denial of Service

!/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is viewed or just at the time it will be viewed.This sploi...

Quick n EasY 2.4 FTP Server - Remote Denial of Service

Quick n EasY 2.4 FTP Server - Remote Denial of Service !/usr/local/bin/perl -w Quick 'n EasY VER 2.4 Ftp Server remote D.o.S Discovered,exploited by KaGra Tested on WinXP SP1 English version sENDING a big buffer in PASS,at least 1041 bytes will crash the sever,as long as the logfile on server is...