3130 matches found
Script local/remote file inclusion/reading and file name truncation vulnerability FUZZ tool details-vulnerability warning-the black bar safety net
Script file include vulnerability can be said is endless, bitter in the market, there is no good comprehensive functions of the targeted open-source tools to do the reference, now the file contains several typical vulnerability for an example. To Plug-in source code and detailed description: This...
CVE-2012-0867
CVE-2012-0867 affects PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3. The vulnerability truncates the SSL certificate common name to 32 characters when verifying hostnames, enabling remote attackers to spoof connections if the hostname is exactly 32 characters. This is...
Vulnerability in contrib module (CVE-2012-2143)
Passwords containing the byte 0x80 passed to the crypt function in pgcrypto are incorrectly truncated if DES encryption was used...
XnView < 1.99.0 Multiple Buffer Overflow Vulnerabilities
The version of XnView installed on the remote Windows host is earlier than 1.99.0. It therefore is reportedly affected by the following heap-based buffer overflow vulnerabilities : - An integer truncation issue exists related to the handling of the depth value in 'Sun Raster' RAS image files. - A...
postgresql: MITM due improper x509_v3 CN validation during certificate verification
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters...
CVE-2012-0867
PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters...
CVE-2011-3026
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation...
Google Fixes 13 Flaws in Chrome
Just a few days after releasing a fairly large set of patches for its Chrome browser, Google has pushed out another update, fixing 13 vulnerabilities, more than half of them being high-severity bugs. The newest version of Chrome also includes an updated version of Adobe Flash that has a fix for a...
PHP 5.x < 5.2.2 Multiple vulnerabilities
According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.2. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow vulnerability was found in PHP's gd extension. A script that could be forced to process WBMP images from an...
ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-11-354 December 22, 2011 - -- CVE ID: CVE-2011-4168 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...
HP Managed Printing Administration jobDelivery Multiple Vulnerabilities
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability. There multiple classes of flaws within this product including arbitrary file creation, null char...
HP Managed Printing Administration jobAcct Multiple Vulnerabilities
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability. There multiple classes of flaws within this product including arbitrary file creation, null char...
GLSA-201111-07 : TinTin++: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201111-07 TinTin++: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TinTin++. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to execu...
TinTin++: Multiple vulnerabilities
Background TinTin++ is a free MUD gaming client. Description Multiple vulnerabilities have been discovered in TinTin++. Please review the CVE identifiers referenced below for details. Impact Remote unauthenticated attackers may be able to execute arbitrary code with the privileges of the TinTin++...
Application to the ASP file upload vulnerability 0×0 0 truncation attack-vulnerability warning-the black bar safety net
k ingbase 2011/8/1 Chinese simple narrative This article translated from: 0×0 0 vs ASP file uploads, the original author is: Brett Moore Security-Assessment. com company, this article is written to 0 in 4 years, the original is here: http://...
Upload vulnerability filepath variable\0 0 truncation-vulnerabilities and early warning-the black bar safety net
POST /coin/upload. asp? action=upfile HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd. ms-excel, application/vnd. ms-powerpoint, application/msword, / Referer: Recently phpwind contains a vulnerability that Diamondback always...
Heap overflow
Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to a...
Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability
====================================================================== Secunia Research 27/09/2011 - Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability - ====================================================================== Table of Contents Affected...
nginx 0.8.37 空字节截断导致任意代码执行漏洞
No description provided by source...
CentOS Update for php CESA-2010:0919 centos5 i386
Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2010:0919 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...