Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow

Yahoo! Messenger 5.x6.0 - Offline Mode Status Remote Buffer Overflow source: https://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied inp...

Ethereal 0.10.9 - Denial of Service

/ Ethereal 3G-A11 remote buffer overflow PoC exploit -------------------------------------------------- Coded by Leon Juranic LSS Security / include include include include include include include main int argc, char argv int sock; struct sockaddrin sin; unsigned char buf1024; char bla200;...

Computalynx CProxy 3.33.4.x - Directory Traversal

Computalynx CProxy 3.33.4.x - Directory Traversal source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose...

Cerulean Studios Trillian 3.0 - Remote .png Image File Parsing Buffer Overflow

Cerulean Studios Trillian 3.0 - Remote .png Image File Parsing Buffer Overflow source: https://www.securityfocus.com/bid/12703/info A remote buffer overflow vulnerability affects Cerulean Studios Trillian. This issue is due to a failure of the application to securely copy image data into finite...

NNTP Server Password Handling Remote Overflow

Nessus was able to crash the remote NNTP server by sending a too long password. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. C Tenable Network Security, Inc. Overflow on the user name is tested by cassandranntpdos.nasl NNTP protocol is...

[SECURITY] [DSA 689-1] New mod_python packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 689-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...

Knox Arkeia Network Backup Agent Default Account

The remote host is running Arkeia Network Backup agent, used for backups of the remote host. The remote version of this agent contains a default account that may allow an attacker to gain read/write arbitrary files on the remote system with the privileges of the Arkeia daemon, usually root. C...

HP-UX PHSS_31068 : HP-UX Running Serviceguard, Remote Increase in Privilege (HPSBUX01080 SSRT3526 rev.2)

s700800 11.23 MC/ServiceGuard A.11.15.00 : A potential security vulnerability has been identified with HP Serviceguard running on HP-UX and Linux that may allow remote unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugi...

MercuryBoard Forum 1.0/1.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/12578/info A remote cross-site scripting vulnerability affects the 'forum.php' script of MercuryBoard. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. A...

[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 680-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

vBulletin forumdisplay.php comma Parameter Arbitrary Command Execution

The remote version of vBulletin is vulnerable to a remote command execution flaw through the script 'forumdisplay.php'. A malicious user could exploit this flaw to execute arbitrary commands on the remote host with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 678-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 674-2 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 671-1 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2005 http://www.debian.org/security/faq -...

ngIRCd <= v0.8.2 Format String Vulnerability

------------------------------------------------- No System Group - Advisory 11 - 03/02/05 ------------------------------------------------- Program: ngIRCd Homepage: http://arthur.ath.cx/alex/ngircd/ Operating System: Linux and Unix-Compatible Vulnerable Versions: ngIRCd v0.8.2 and prior Risk:...

WarFTPd CWD Command Remote DoS

The remote host is running War FTP Daemon, an FTP server for Windows. The remote version of this software is prone to a remote denial of service vulnerability. An attacker may exploit this flaw to crash the remote service. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...

[SECURITY] [DSA 656-1] New vdr packages fix insecure file access

-------------------------------------------------------------------------- Debian Security Advisory DSA 656-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

Citadel/UX select() Bitmap Array Index Remote Oerflow

The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...

Debian DSA-654-1 : enscript - several vulnerabilities

Erik Sjolund has discovered several security relevant problems in enscript, a program to convert ASCII text into Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2004-1184 Unsanitised input can cause the execution of...

multiple applications fd_set structure bitmap array index overflow

Issue: Multiple applications fdset structure bitmap array index overflow Type: remote Date: December, 12 2004 Original URL: http://www.security.nnov.ru/advisiories/sockets.asp Author: 3APA3A URL: http://www.security.nnov.ru/ Affected: gnugk 2.2.0 confirmed, fixed by vendor gnugk is OpenH323...