2335 matches found
Security Best Practice: POP3/IMAP Security
Post Office Protocol version 3 POP3 and Internet Messaging Access Protocol version 4 IMAP4 are electronic mail protocols used to retrieve messages stored in e-mail servers.There are several serious security limitations with these protocols that allow malicious attackers to compromise a remote...
SpamAssassin spamd Crafted Message Arbitrary Command Execution
The remote host is running spamd, a daemon belonging to SpamAssassin and used to determine whether messages represent spam. The installed version of spamd on the remote host appears to allow an unauthenticated user to execute arbitrary commands, subject to the privileges of the user under which i...
PunkBuster-1.229.txt
Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...
Different FTP servers multiple security vulnerabilities
Multiple vulnerabilities were uncovered with FTP Fuzzer stress test suite. - ArgoSoft FTP Server RNTO Unicode overflow - Golden FTP Server NLST overflow - FileZilla FTP Server MLSD - FileZilla remote server interface homemade protocol - WarFTPD various exceptions and WDM.exe overflow...
Mantis File Inclusion and SQL Injection Flaws
The remote web server contains a PHP application that is affected by multiple flaws. Description : The remote version of Mantis suffers from a remote file inclusion vulnerability. Provided PHP's 'registerglobals' setting is enabled, An attacker may be able to leverage this issue to read arbitrary...
security flaw
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service crash via a long symlink, which is not properly handled in 1 nfs2xdr.c or 2 nfs3xdr.c and causes a crash in the NFS client...
LieroX <= 0.62b Remote Server/Client Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================== LieroX include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h ...
LieroX <= 0.62b Remote Server/Client Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdarg.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
Plogger exploit method! - Vulnerability warning-the black bar safety net
http://www.hackeroo.com/Plogger 是 一 款 基于 PHP 的 网络日记 程序 the. Plogger does not filter the user submits the URI of the data, exploit vulnerabilities in the WEB permissions to execute arbitrary commands. Vulnerability in'plog-admin-functions.php'script for user-submitted'configbasedir'parameter is no...
WebCalendar < 1.0.2 Multiple Vulnerabilities
The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...
WebCalendar < 1.0.2 Multiple Vulnerabilities
Binary data 3303.prm...
Moodle < 1.5.3 Multiple SQL Injection Vulnerabilities
The remote installation of Moodle fails to sanitize user-supplied input to the 'id' parameter of the 'course/category.php' and 'course/info.php' scripts as well as the 'user' parameter of the 'iplookup/ipatlas/plot.php' script before using it in database queries. An attacker can exploit these...
PHPix directory traversal vulnerability
PHPix program allows an attacker to read arbitrary files on the remote web server, prefixing the pathname of the file with ..%2F..%2F.. Example: GET /Album/?mode=album&album=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc&dispsize=640&start=0 will return all the files that are nested within /etc...
wu-ftpd ABOR privilege escalation
The remote Wu-FTPd server seems to be vulnerable to a remote privilege escalation. This version contains a flaw that may allow a malicious user to gain access to unauthorized privileges. Specifically, there is a flaw in the way that the server handles an ABOR command after a data connection has...
Mantis multiple unspecified XSS
The remote web server contains a PHP application that is prone to cross-site scripting attacks. Description : According to its banner, the remote version of Mantis contains a flaw in the handling of some types of input. Because of this, an attacker may be able to cause arbitrary HTML and script...
Sgdynamo 'sgdynamo.exe' Physical Path Disclosure Vulnerability
The CGI SPDX-FileCopyrightText: 2003 Scott Shebby Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11954";...
dwhttpd format string
The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Horde < 3.2.2 IMP_MIME_Viewer_html class XSS Vulnerabilities
The remote server is running at least one instance of Horde IMP whose version number is between 3.0 and 3.2.1 inclusive. SPDX-FileCopyrightText: 2003-2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CjOverkill trade.php XSS
The remote server runs a version of CjOverkill, a free traffic trading script which is as old as or older than version 4.0.3. The remote version of this software is affected by a cross-site scripting vulnerability in the script 'trade.php'. This issue is due to a failure of the application to...
Check for Apache Multiple / vulnerability
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...