Lucene search
+L

1959 matches found

zdt
zdt
•added 2005/12/03 12:00 a.m.•28 views

sobexsrv 1.0.0_pre3 Bluetooth syslog() Remote Format String Exploit

Exploit for linux platform in category remote exploits =================================================================== sobexsrv 1.0.0pre3 Bluetooth syslog Remote Format String Exploit =================================================================== !/usr/bin/perl trifinite.group Bluetooth...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2005/12/03 12:00 a.m.•50 views

sobexsrv 1.0.0_pre3 Bluetooth - 'syslog()' Remote Format String

!/usr/bin/perl trifinite.group Bluetooth sobexsrv remote syslog exploit code by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com Shouts to my nigga Chung and the Donut Shop... keep fighting that SARS dude! Big ups to d4yj4y beeeeeeeeeeeeeotch! $retloc = 0x8053418; Due to unicode the...

5.1CVSS5.8AI score0.0435EPSS
SaveExploits2
NVD
NVD
•added 2005/12/01 2:07 a.m.•28 views

CVE-2005-3704

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

5CVSS6.6AI score0.01506EPSS
SaveExploits0References7
CVE
CVE
•added 2005/12/01 2:02 a.m.•67 views

CVE-2005-3704

CVE-2005-3704 describes a vulnerability in Mac OS X and OS X Server versions 10.4 through 10.4.3 where a remote attacker can spoof syslog messages by injecting control characters (e.g., newline) into log files. The description specifies this affects the system log server and enables manipulation ...

5CVSS6.7AI score0.01506EPSS
SaveExploits0References7Affected Software2
Cvelist
Cvelist
•added 2005/12/01 2:02 a.m.•44 views

CVE-2005-3704

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

6.6AI score0.01506EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/01 12:00 a.m.•5 views

CVE-2005-3704: Undefined Security Weakness

System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline NL...

5CVSS5.8AI score0.01506EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2005/11/30 11:03 a.m.•53 views

CVE-2005-3912

Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service crash or memory consumption and possibly execute arbitrary code via format string specifiers in the usernam...

7.5CVSS6.6AI score0.1448EPSS
SaveExploits2References1
CVE
CVE
•added 2005/11/30 11:00 a.m.•131 views

CVE-2005-3912

CVE-2005-3912: Webmin/miniserv.pl format-string vulnerability (username in login form) can crash or exhaust resources and potentially allow remote code execution when syslog logging is enabled. Affected: Webmin < 1.250 and Usermin

7.5CVSS7.7AI score0.1448EPSS
SaveExploits2References17Affected Software1
Tenable Nessus
Tenable Nessus
•added 2005/11/30 12:00 a.m.•63 views

Mac OS X Multiple Vulnerabilities (Security Update 2005-009)

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications : - Apache2 - Apachemodssl - CoreFoundation - curl - iodbcadmintool - OpenSSL - passwordserver - Safari - sudo - syslog C Tenable Network Security, Inc...

10CVSS6.5AI score0.30576EPSS
SaveExploits2References14
Cvelist
Cvelist
•added 2005/11/16 7:37 a.m.•34 views

CVE-2003-1236

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog...

7.8AI score0.1519EPSS
SaveExploits2References8
CVE
CVE
•added 2005/11/16 7:37 a.m.•55 views

CVE-2003-1236

CVE-2003-1236 involves multiple format-string vulnerabilities in the logger function of netzio.c for the Tanne 0.6.17 release, allowing remote attackers to execute arbitrary code via format specifiers in syslog. The entry is supported by multiple sources (NVD/CVE records, CVE List, Nessus/NSM fin...

10CVSS7.8AI score0.1519EPSS
SaveExploits2References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/16 12:00 a.m.•4 views

CVE-2003-1236: Undefined Security Weakness

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code via format string specifiers in syslog...

10CVSS6.5AI score0.1519EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•49 views

cfengine format string vulnerability

Cfengine is running on this remote host. Cfengine contains a component, cfd, which serves as a remote-configuration client to cfengine. This version of cfd contains several flaws in the way that it calls syslog. As a result, trusted hosts and valid users if access controls are not in place can...

10CVSS7.5AI score0.02525EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•35 views

cfengine format string vulnerability

Cfengine is running on this remote host. Cfengine contains a component, cfd, which serves as a remote-configuration client to cfengine. This version of cfd contains several flaws in the way that it calls syslog. As a result, trusted hosts and valid users if access controls are not in place can...

10CVSS0.2AI score0.02525EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2005/10/10 12:00 a.m.•43 views

OpenVMPS open Cisco VMPS protocol server implementation format string vulnerability

Format string bug on syslog call...

2.2AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2005/09/27 12:00 a.m.•26 views

RSyslog SQL injection

SQL injection on syslog message...

3.2AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2005/09/27 12:00 a.m.•39 views

[SA16947] RSyslog Syslog Message SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

1.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/08/18 4:00 a.m.•31 views

CVE-2004-2417

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 client hostname or 2 message-id, which are injected into a syslog message...

7.7AI score0.02688EPSS
SaveExploits0References5
CVE
CVE
•added 2005/08/18 4:00 a.m.•51 views

CVE-2004-2417

CVE-2004-2417 : A format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote code execution by injecting format string specifiers via the client hostname or message-id into a syslog message. Affected: smtp.proxy before 1.1.3. Impact and remediation details are not provid...

7.5CVSS8.1AI score0.02688EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/18 12:00 a.m.•4 views

CVE-2004-2417: Undefined Security Weakness

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 client hostname or 2 message-id, which are injected into a syslog message...

7.5CVSS6.6AI score0.02688EPSS
SaveExploits0References1
Rows per page
Query Builder