2902 matches found
CVE-2003-0685
...
gtop daemon contains buffer overflow
Overview A buffer overflow exists in the gtop daemon. Description A buffer overflow in gtopd, specifically permitted, may allow a remote attacker to execute arbitrary code. For more detailed information, please see Flavio Veloso's analysis.gtop background information Many Unix systems allow only...
CVE-2003-0142
Adobe Acrobat Reader acroread 6, under certain circumstances when running with the "Certified plug-ins only" option disabled, loads plug-ins with signatures used for older versions of Acrobat, which can allow attackers to cause Acrobat to enter Certified mode and run untrusted plugins by modifyin...
Netris buffer overflow
Multiple buffer overflows...
Ecartis 1.0 multiple vulnerabilities
Ecartis is a modular mailing list manager, previously called Listar. I reported these in Ecartis' bug database sometimes in May. Remembered it again in June and sent a reminder mail to ecartis-dev list. Remembered it again today and looks like nothing is still done. Just so it won't get completel...
CVE-2003-0504
...
CVE-2003-0407
...
[KSA-002] Multiple Vulnerabilities In Moregroupware
PROGRAM: Moregroupware HOMEPAGE: http://www.moregroupware.com/ VULNERABLE VERSIONS: 0.6.7 and prior ? RISK: Low/Medium IMPACT: Cross Site Scripting RELEASE DATE: 2003-06-26 ================================================= TABLE OF CONTENTS =================================================...
Sun JMF unuathorized java applet memory access
Java applet can access system memory...
CVE-2003-0370
...
CVE-2003-0246
...
Nonexistent Page (404) Physical Path Disclosure
The remote web server reveals the physical path of the webroot when a nonexistent page is requested. While printing errors to the output is useful for debugging applications, this feature should be disabled on production servers. C Tenable Network Security, Inc. Vulnerable servers: Pi3Web/2.0.0...
Solaris syslogd buffer overflow
Buffer overflow on files larger than 1024 bytes...
Max Web Portal 1.30 - Multiple Vulnerabilities
Max Web Portal 1.30 - Multiple Vulnerabilities Max Web Portal Multiple Vulnerabilities Vendor: Max Web Portal Product: Max Web Portal Version: alertdocument.cookie Remember this vuln as I will later explain how it can be used to aide an attacker to compromise user and admin accounts. Hidden Form...
Desktop Orbiter Server Detection
The remote host is running a Desktop Orbiter Satellite. This service could be used by an attacker to partially take control of the remote system, as it is not password protected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
mod_gzip Debug Mode mod_gzip_printf Remote Format String
The remote host is running modgzip with debug symbols compiled in. The debug code includes vulnerabilities that can be exploited by an attacker to gain a shell on this host. C Tenable Network Security, Inc. Ref: From: "Matthew Murphy" To: "BugTraq" , Subject: Modgzip Debug Mode Vulnerabilities...
Multiple Vulnerabilities In P-Synch Password Management
Multiple Vulnerabilities In P-Synch Password Management ------------------------------------------------------- The other night I came across a server running P-Synch. I had never heard of it so i was curious to poke around on it a bit. Within an hour i found the vulns listed below. Im pretty sur...
Geeklog <= 1.3.7sr1 Multiple Vulnerabilities (SQLi, XSS, Priv Esc)
The remote server is running a version of Geeklog affected by various vulnerabilities, including SQL injection, arbitrary file upload, privilege escalation, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Date: Thu, 29 May 2003 13:02:55 +0800 From: pokleyzz To: [email protected],...