763 matches found
CVE-2004-2671
mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the 1 mod and 2 cid parameters...
CVE-2004-2105
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...
GLSA-200410-13 : BNC: Input validation flaw
The remote host is affected by the vulnerability described in GLSA-200410-13 BNC: Input validation flaw A flaw exists in the input parsing of BNC where part of the sbufgetmsg function handles the backspace character incorrectly. Impact : A remote user could issue commands using fake authenticatio...
AOL Instant Messenger AIM "Away" Message Remote Exploit
Exploit for unknown platform in category remote exploits ======================================================= AOL Instant Messenger AIM "Away" Message Remote Exploit ======================================================= / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by...
CVE-2004-0306
Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...
CVE-2002-1367
Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need...
SUSE-SA:2003:022: apcupsd
The remote host is missing the patch for the advisory SUSE-SA:2003:022 apcupsd. The controlling and management daemon apcupsd for APC's Unbreakable Power Supplies is vulnerable to several buffer overflows and format bugs. These bugs can be exploited remotely by an attacker to gain root access to...
osTicket Arbitrary Attachment Disclosure
The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the Nessus Scripts License for...
[security bulletin] SSRT4719 hp OpenView Select Access remote unauthorized access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBMA01045 REVISION: 0 SSRT4719 rev.0 hp OpenView Select Access remote unauthorized access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...
SurgeLDAP 1.0 - Web Administration Authentication Bypass
SurgeLDAP 1.0 - Web Administration Authentication Bypass source: https://www.securityfocus.com/bid/10294/info SurgeLDAP is an LDAP server implementation for Microsoft Windows and various Unix operating systems. It includes a built-in web server to permit remote user access via HTTP. It has been...
FreeBSD-SA-04:09.kadmind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:09.kadmind Security Advisory The FreeBSD Project Topic: heimdal kadmind remote heap buffer overflow Category: contrib Module: cryptoheimdal Announced:...
CVE-2004-1852
DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information...
CVE-2004-0061
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...
CVE-2003-0119
The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities...
Gallery 1.3.x/1.4 - Remote Global Variable Injection
source: https://www.securityfocus.com/bid/9490/info It has been reported that Gallery is prone to a vulnerability that may allow a remote attacker to gain unauthorized access by overwriting various values for global variables. The issue occurs due to improper simulation of the behaviour of...
PhpGedView 2.61 - PHPInfo Information Disclosure
PhpGedView 2.61 - PHPInfo Information Disclosure source: https://www.securityfocus.com/bid/9371/info PhpGedView allows remote users to access information displayed by the phpinfo function. This may disclose sensitive information about the environment the software runs in. This issue is reported t...
CVE-2003-1454
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access...
CVE-2003-1296
Easy File Sharing EFS Web Server 1.2 allows remote authenticated users to cause a denial of service via 1 an "empty symbol" in the Title field or 2 certain data in the Your Message field, possibly a long argument...