WS_FTP Server Multiple Command Remote Overflow DoS

According to its version number, the remote WSFTP server is vulnerable to multiple buffer overflows which may be used by an attacker to execute arbitrary code on the remote system. C Tenable Network Security include"compat.inc"; ifdescription scriptid15857; scriptbugtraqid11772;...

PHPNews sendtofriend.php 'mid' Parameter SQLi

The PHPNews application running on the remote web server is affected by a SQL injection vulnerability due to improper validation of user-supplied input to the 'mid' parameter tin the sendtofriend.php script. A remote attacker can exploit this to inject arbitrary SQL commands. %NASLMINLEVEL 70300 ...

Open DC Hub: Remote code execution

Background Open DC Hub is the hub software for the Direct Connect file sharing network. Description Donato Ferrante discovered a buffer overflow vulnerability in the RedirectAll command of the Open DC Hub. Impact Upon exploitation, a remote user with administrative privileges can execute arbitrar...

phpWebSite: HTTP response splitting vulnerability

Background phpWebSite is a web site content management system. Description Due to lack of proper input validation, phpWebSite has been found to be vulnerable to HTTP response splitting attacks. Impact A malicious user could inject arbitrary response data, leading to content spoofing, web cache...

Cyrus IMAP Server: Multiple remote vulnerabilities

Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description Multiple vulnerabilities have been discovered in the argument parsers of the 'partial' and 'fetch' commands of the Cyrus IMAP Server CAN-2004-1012, CAN-2004-1013. There are also buffer overflows in t...

[SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities

SIG^2 Vulnerability Research Advisory CMailServer WebMail v5.2 Multiple Vulnerabilities by Tan Chew Keong Release Date: 24 Nov 2004 ADVISORY URL http://www.security.org.sg/vuln/cmailserver52.html SUMMARY CMailServer http://www.youngzsoft.net/cmailserver/ is a small and easy-to-use Mail Server...

TWiki: Arbitrary command execution

Background TWiki is a Web-based groupware tool based around the concept of wiki pages that can be edited by anybody with a Web browser. Description The TWiki search function, which uses a shell command executed via the Perl backtick operator, does not properly escape shell metacharacters in the...

phpBB viewtopic.php highlight Parameter SQL Injection (ESMARKCONANT)

The remote host is running phpBB. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands in the login form. An attacker could exploit this flaw to bypass the authentication of the remote host or execute arbitrary SQL statements against the remote database...

unarj: Long filenames buffer overflow and a path traversal vulnerability

Background unarj is an ARJ archive decompressor. Description unarj has a bounds checking vulnerability within the handling of long filenames in archives. It also fails to properly sanitize paths when extracting an archive if the "x" option is used to preserve paths. Impact An attacker could trigg...

Multiple Vendor DNS Response Flooding Denial Of Service

The remote DNS server is vulnerable to a denial of service attack because it replies to DNS responses. An attacker could exploit this vulnerability by spoofing a DNS packet so that it appears to come from 127.0.0.1 and make the remote DNS server enter into an infinite loop, therefore denying...

phpBB Cash_Mod admin_cash.php Arbitrary Command Execution

It is possible to make the remote host include PHP files hosted on a third-party server using the phpBB CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...

SquirrelMail: Encoded text XSS vulnerability

Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP, and can optionally be installed with SQL support. Description SquirrelMail fails to properly sanitize certain strings when decoding specially-crafted headers. Impact By enticing a user to read a...

Ruby: Denial of Service issue

Background Ruby is an interpreted scripting language for quick and easy object-oriented programming. Ruby's CGI module can be used to build web applications. Description Ruby's developers found and fixed an issue in the CGI module that can be triggered remotely and cause an infinite loop. Impact ...

SquirrelMail decodeHeader Arbitrary HTML Injection

The remote host is running SquirrelMail, a webmail system written in PHP. Versions of SquirrelMail prior to 1.4.4 are affected by an email HTML injection issue. A remote attacker can exploit this flaw to gain access to the users' accounts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

EGroupWare Multiple Vulnerabilities (SQLi, ID)

The remote host is running eGroupWare, a web-based groupware solution. It is reported that versions 1.0.0.006 and older are prone to multiple SQL injection and cross-site scripting flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Ruby cgi.rb Malformed HTTP Request CPU Utilization DoS

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU resources. Warning : Nessus solely relied on the presence of this CGI, it did not...

ez-ipupdate: Format string vulnerability

Background ez-ipupdate is a utility for updating host name information for a large number of dynamic DNS services. Description Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in ez-ipupdate. Impact An attacker could exploit this to execute arbitrary...

Pavuk: Multiple buffer overflows

Background Pavuk is web spider and website mirroring tool. Description Pavuk contains several buffer overflow vulnerabilities in the code handling digest authentication and HTTP header processing. This issue is similar to GLSA 200407-19, but contains more vulnerabilities. Impact A remote attacker...

[ GLSA 200411-17 ] mtink: Insecure tempfile handling

Gentoo Linux Security Advisory GLSA 200411-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Debian DSA-573-1 : cupsys - integer overflows

Chris Evans discovered several integer overflows in xpdf, that are also present in CUPS, the Common UNIX Printing System, which can be exploited remotely by a specially crafted PDF document. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...