5904 matches found
CVE-2000-0898: Undefined Security Weakness
Small HTTP Server 2.01 does not properly process Server Side Includes SSI tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file...
Advisory: Gaim remote vulnerability
Author: Stan Bubrouski [email protected] Date: November 9, 2000 Package: Gaim Versions affected: 0.10.3 current and previous 0.10.x versions. Severity: A remote user could potentially execute shell code as the user Gaim is running as. Problem:There is a buffer overflow in Gaim's parsing of HTML ta...
CVE-2000-0116
The CVE-2000-0116 entry affects Firewall-1. The vulnerability arises from insufficient filtering of script tags; attackers can bypass the Strip Script Tags restriction by prefixing an extra
CVE-2000-0596: Undefined Security Weakness
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability...
CVE-2000-0116: Undefined Security Weakness
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
CVE-2000-0236: Undefined Security Weakness
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
win98-bluescreen.txt
=-= Next Generation of Windows 98 Blues Screen 2 =-= By RUBINHOC from BraZiL Original exploit found by www.securax.org Only for: ruindows 98 maybe 95 too. Techniques: NEW - Infernal Pulse 03/17/2000 =-= WIN98 webservers =-= customized by RUBINHOC rubinhoc:roottelnet victim.com 80 Trying x.x.x.x...
winreal.6-7.txt
Win32 Realplayer 6/7 Buffer Overflow Vulnerability Summary: ---------------------- There is a buffer overflow in the Win32 RealPlayer Basic client, versions 6 and 7. This appears to occur when 299 characters are entered as a 'location' to play, such as http://aaaaa..... with 300 a's. I have teste...
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
fw1_script.tags.txt
Hi all, The "Strip Script Tags" in FW-1 can be circumvented by adding an extra tag like in this code: alert"hello world" test This code will pass unchanged, and still execute in both Navigator and Explorer. I tried this on version 3.0 of FW-1 on Windows NT 4.0 but I'm not able to check it on...
CVE-2000-0116
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra in front of the SCRIPT tag...
CVE-1999-0685
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option...
CVE-1999-0685
CVE-1999-0685 describes a buffer overflow in Netscape Communicator triggered by EMBED tags in the pluginspage option. The affected product is Netscape Communicator; the vulnerability concerns the plugin-related EMBED handling path, with the root cause identified as a buffer overflow. Practical im...
CVE-1999-0685: Undefined Security Weakness
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option...
IBM HomePagePrint 1.0 7 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/763/info Certain versions of the IBM Web page printout software "IBM HomePagePrint " can in some instances be remotely exploited by malicious webservers. The problem lies in a buffer overflow in the code which handles IMGSRC tags. If a page containing ...
CVE-1999-1522
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML...
CVE-1999-0685
Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option...
Netscape Communicator 4.06/4.5/4.6/4.51/4.61 - EMBED Buffer Overflow
/ source: https://www.securityfocus.com/bid/618/info In several versions of Netscape Communicator, there is an unchecked buffer in the code that handles EMBED tags. The buffer is in the 'plugins page' option. This vulnerability can be exploited by a malicious webpage. / // /Netscape communicator...