492 matches found
Fixed in Apache Tomcat 5.5.18, 5.0.SVN
Moderate: Cross-site scripting CVE-2006-7195 The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered. Affects: 5.0.0-5.0.30, 5.5.0-5.5.17...
Update: ViewCVS and ViewVC 'checkout view' content type fixation issue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi! Moritz Naumann wrote: This does not impact how much the rest of my report applies. My findings are now being discussed on the ViewVC developers mailing list 1. They apparently also impact ViewVC. Whether and to which degree what I am reporting c...
[SA23826] Django Two Vulnerabilities
TITLE: Django Two Vulnerabilities SECUNIA ADVISORY ID: SA23826 VERIFY ADVISORY: http://secunia.com/advisories/23826/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Django 0.x http://secunia.com/product/13287/ DESCRIPTION: Some vulnerabilities hav...
FreeBSD : mplayer -- buffer overflow in the code for RealMedia RTSP streams. (b2ff68b2-9f29-11db-a4e4-0211d87675b7)
A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...
mplayer -- buffer overflow in the code for RealMedia RTSP streams.
A potential buffer overflow was found in the code used to handle RealMedia RTSP streams. When checking for matching asm rules, the code stores the results in a fixed-size array, but no boundary checks are performed. This may lead to a buffer overflow if the user is tricked into connecting to a...
Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127)
Luigi Auriemma Application: Warzone Resurrection http://home.gna.org/warzone/ Warzone 2100 http://www.strategyplanet.com/warzone2100/ Versions: = 2.0.3 and SVN = 127 Platforms: Windows, nix, BSD and others Bug: A buffer-overflow in recvTextMessage B buffer-overflow in NETrecvFile Exploitation: A...
Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)
Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...
CVE-2006-3788
Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via 1 a long unit name in Net::recvaddunit,; 2 large values to Net::recvrules, Net::recvselectunit, Net::recvoptions, and Net::recvunitdata; and 3 a large mapdata GEODATA structure in...
Format string
Format string vulnerability in the raydiumlog function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydiumconsolelineadd...
CVE-2006-2410
raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...
CVE-2006-2408
Raydium is affected by multiple buffer overflows prior to SVN revision 310. The vulnerability allows remote attackers to execute arbitrary code by sending a large packet, exploiting two code paths: raydium_log in log.c and raydium_console_line_add in console.c, potentially triggered by a long pla...
CVE-2006-2409
CVE-2006-2409 affects Raydium prior to SVN revision 310, where a format string vulnerability in the raydium_log function (console.c) can allow local users to execute arbitrary code through format specifiers in the format parameter, not properly handled in a call to raydium_console_line_add. Affec...
CVE-2006-2410
raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...
Raydium <= SVN 309 Multiple Remote Vulnerabilities Exploit
Exploit for unknown platform in category dos / poc ========================================================== Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit ========================================================== http://www.inj3ct0r.com/sploits/6147.zip 0day.today 2018-04-12...
raydium svn 309 - Multiple Vulnerabilities
raydium svn 309 - Multiple Vulnerabilities Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1784.zip 05132006-raydiumx.zip...
Raydium <= SVN 309 Multiple Remote Vulnerabilities Exploit
No description provided by source. Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit http://www.milw0rm.com/sploits/05132006-raydiumx.zip milw0rm.com 2006-05-14...
raydium svn 309 - Multiple Vulnerabilities
Raydium = SVN 309 Multiple Remote Vulnerabilities Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1784.zip 05132006-raydiumx.zip...
CVE-2006-1564
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the 1 modauthzsvn.so and 2 moddavsvn.so modules, which might allow local users to gain privileges by installing malicious libraries in that...
CVE-2006-1564
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the 1 modauthzsvn.so and 2 moddavsvn.so modules, which might allow local users to gain privileges by installing malicious libraries in that...
Design/Logic Flaw
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the 1 modauthzsvn.so and 2 moddavsvn.so modules, which might allow local users to gain privileges by installing malicious libraries in that...