6265 matches found
Hack rampage the era of the URL address will lie-vulnerability warning-the black bar safety net
My name is URL, i.e.,“Uniform Resource Locators”, which means Uniform Resource Locator. In the address bar URL will belong to me the URL of an expression. Substantially all of the visit website the friends are used to me, so my role is very large. Perhaps many friends don't know that I'm very...
OmniPro HTTPd 2.08 scripts source full disclosure
OmniPro HTTPd 2.08 suffers from a security vulnerability that permits malicious users to get the full source code of scripting files. By appending an ASCII/Unicode space char '%20' at the script suffix, the web server will no longer interpret it and rather send it back clearly as a simple documen...
IIS directory traversal
The remote IIS server allows anyone to execute arbitrary commands by adding a unicode representation for the slash character in the requested path. OpenVAS Vulnerability Test $Id: iisdirtraversal.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IIS directory traversal Authors: First written...
Microsoft IIS Directory Traversal Vulnerability (MS00-078) - Active Check
The remote IIS server allows anyone to execute arbitrary commands by adding a unicode representation for the slash character in the requested path. SPDX-FileCopyrightText: 2001 HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...
CVE-2005-3421
estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...
CVE-2005-3421
Hyper Estraier 1.0.1 (estcmd) on Windows is affected. A remote attacker can read unauthorized files by sending a crafted search request where the filename contains Unicode characters. Affected component appears to be estcmd within Hyper Estraier; the vulnerability arises during a search/indexing ...
CVE-2005-3421
estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...
Multiple Hyper Estraier vulnerabilities
DoS on indexing files with special Unicode characters in the names. Files from non-searchable directories are indexed...
[SA17379] Hyper Estraier Windows Unicode Filename Handling Vulnerability
TITLE: Hyper Estraier Windows Unicode Filename Handling Vulnerability SECUNIA ADVISORY ID: SA17379 VERIFY ADVISORY: http://secunia.com/advisories/17379/ CRITICAL: Less critical IMPACT: Exposure of sensitive information, DoS WHERE: From remote SOFTWARE: Hyper Estraier 1.x...
CVE-2005-3421: Undefined Security Weakness
estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...
security flaw
Buffer overflow vulnerability in the unicodetobytes in the Service Location Protocol srvloc dissector packet-srvloc.c in Ethereal allows remote attackers to execute arbitrary code via a srvloc packet with a modified length value...
bogofilter -- heap corruption through malformed input
Matthias Andree reports: When using Unicode databases default in more recent bogofilter installations, upon encountering invalid input sequences, bogofilter or bogolexer could overrun a malloc'd buffer, corrupting the heap, while converting character sets. Bogofilter would usually be processing...
USN-200-1: Thunderbird vulnerabilities
A buffer overflow was discovered in the XBM image handler. By tricking an user into opening a specially crafted XBM image, an attacker could exploit this to execute arbitrary code with the user's privileges. CAN-2005-2701 Mats Palmgren discovered a buffer overflow in the Unicode string parser...
thunderbird security update
CentOS Errata and Security Advisory CESA-2005:791 An updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail...
security flaw
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...
Important: Red Hat Security Advisory: thunderbird security update
An updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way...
Fedora Core 4 : mozilla-1.7.12-1.5.1 (2005-927)
Updated mozilla packages that fix several security bugs are now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML...
Fedora Core 3 : mozilla-1.7.12-1.3.1 (2005-932)
Updated mozilla packages that fix several security bugs are now available for Fedora Core 3. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML...
Mandrake Linux Security Advisory : mozilla (MDKSA-2005:170)
A number of vulnerabilities have been discovered in Mozilla that have been corrected in version 1.7.12 : A bug in the way Mozilla processes XBM images could be used to execute arbitrary code via a specially crafted XBM image file CVE-2005-2701. A bug in the way Mozilla handles certain Unicode...
Fedora Core 3 : firefox-1.0.7-1.1.fc3 (2005-931)
An updated firefox package that fixes several security bugs is now available for Fedora Core 3. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes XBM image...