DSA-937-1 tetex-bin - buffer overflows

Bulletin has no description...

Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities

Background Xpdf and GPdf are PDF file viewers that run under the X Window System. Poppler is a PDF rendering library based on Xpdf code. The Common UNIX Printing System CUPS is a cross-platform print spooler. It makes use of Xpdf code to handle PDF files. Description infamous41md discovered that...

DSA-920-1 ethereal - buffer overflow

Bulletin has no description...

DSA-915-1 helix-player - buffer overflow

Bulletin has no description...

DSA-912-1 centericq - denial of service

Bulletin has no description...

DSA-909-1 horde3 - missing input sanitising

Bulletin has no description...

BrowseGate HTTP headers overflows

It was possible to kill the BrowseGate proxy by sending it an invalid request with too long HTTP headers Authorization and Referer A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id:...

Too long basic authentication DoS

It was possible to kill the web server by sending a request with an too long Basic authentication field. A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id: wwwtoolongauthDoS.nasl 8023...

Boozt index.cgi overflow

It seems that index.cgi from Boozt AdBanner is installed and is vulnerable to a buffer overflow: It doesn SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

dwhttpd format string

The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

webcart.cgi

webcart.cgi is installed and does not properly filter user input. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOCKS4 Username Overflow DoS Vulnerability

It was possible to kill the remote SOCKS4 server by sending a request with a too long username. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Interspire ArticleLive 2005 XSS Vulnerability

The remote web server is running ArticleLive, a set of CGIs designed to simplify the management of a news site which is vulnerable to a cross site scripting issue. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

The ACC router shows configuration without authentication

The remote router is an ACC router. Some software versions on this router will allow an attacker to run the SHOW command without first providing any authentication to see part of the router's configuration. OpenVAS Vulnerability Test $Id: acc.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: T...

AnalogX SimpleServer:WWW DoS

It was possible to kill the remote web server by sending 640 @ character to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Format string on HTTP header name

The remote web server seems to be vulnerable to a format string attack on HTTP headers names. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

BadBlue invalid null byte vulnerability

It was possible to read the content of /EXT.INI BadBlue configuration file by sending an invalid GET request. A cracker may exploit this vulnerability to steal the passwords. OpenVAS Vulnerability Test $Id: badbluenullbyte.nasl 7175 2017-09-18 11:55:15Z cfischer $ Description: BadBlue invalid nul...

CactuShop XSS and SQL injection flaws

The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be...

The ACC router shows configuration without authentication

The remote router is an ACC router. Some software versions on this router will allow an attacker to run the SHOW command without first providing any authentication to see part of the router SPDX-FileCopyrightText: 2000 Sebastian Andersson Some text descriptions might be excerpted from a reference...

Incomplete Basic Authentication DoS Vulnerability

It was possible to kill the web server by sending an invalid request with an incomplete Basic authentication. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...