4925 matches found
phpPgAdmin sql.php goto Parameter Traversal Arbitrary File Access
It is possible to make the remote phpPgAdmin installation read arbitrary data on the remote host. An attacker could use this flaw to read /etc/passwd or any file that your web server has the right to access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref:...
Pi3Web < 2.0.1 CGI Handler Long Parameter Handling Overflow
The remote server may crash when it is sent a very long CGI parameter multiple times, as in : GET /cgi-bin/hello.exe?AAAAA...AAAA An attacker may use this flaw to prevent the remote host from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. We do banner checking, as I could...
TYPSoft FTP Server Malformed STOR / RETR Command DoS
The remote FTP server crashes when it is sent the command RETR ../../ or STOR ../../ An attacker may use this flaw to cause the server to crash. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and C...
IBM Tivoli SecureWay WebSEAL Proxy Policy Director Encoded URL DoS
The remote web server crashes when an URL ending with %2E is requested. An attacker may use this flaw to cause the server crash continually. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN...
Sendmail < 8.8.5 MIME Conversion Malformed Header Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a MIME conversion overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10055; scriptversion"1.22";...
Apache Tomcat DOS Device Name XSS
Apache Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. By making requests for DOS Device names it is possible to cause Tomcat to throw an exception, allowing cross-site scripting attacks. The exception...
Potential security issues in Ethereal
Looks like Ethereal has some potential security issues: http://www.ethereal.com/appnotes/enpa-sa-00004.html -- Name: Potential issues with Ethereal 0.9.3 Docid: enpa-sa-00004 Date: May 19, 2002 Severity: High Description: Four potential security issues have been discovered in Ethereal 0.9.3: The...
SquirrelMail compose.php script does not adequately validate input thereby allowing arbitrary user to send messages
Overview Some versions of SquirrelMail do not properly validate input. Attackers can spoof email addresses through this vulnerability. Description SquirrelMail is a collection of PHP4 scripts that provides webmail services. Prior to version 1.24, SquirrelMail does not properly validate Universal...
Mp3 file can execute code in Winamp [Sandblad advisory #5]
Sandblad advisory 5 - ---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Mp3 file can execute code in Winamp. Date: 2002-04-26 Software: Nullsoft Winamp 2.79 Rating: High because mp3 files are widely trusted as safe. Impact: Specially crafted mp3 file can execute arbitrary...
AOL Instant Messenger contains buffer overflows in parsing of AIM URI handler requests
Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A buffer overflow vulnerability exists that can manipulate the configuration of the victim's client. Description AIM installs a URI handler that permits the use of the "aim:" protocol on the...
GnuPG contains format-string vulnerability in handling of encrypted data filename
Overview Some versions of Gnu Privacy Guard GPG contain a format-string vulnerability from improper handling of filenames when decrypting files. Description GPG is an OpenPGP-compliant alternative to PGP to protect electronic communications using public-key cryptography. Versions of GPG prior to...
KPMG-2002005: BitVise WinSSH Denial of Service
-------------------------------------------------------------------- -=BitVise WinSSH Denial of Service=- courtesy of KPMG Denmark BUG-ID: 2002005 Released: 18th Mar 2002 -------------------------------------------------------------------- Problem: ======== Using "ill-intended connection attempts...
Apache-SSL < 1.3.23+1.46 i2d_SSL_SESSION Function SSL Client Certificate Overflow
The remote host is using a version of Apache-SSL that is older than 1.3.22+1.46. Such versions are vulnerable to a buffer overflow that, albeit difficult to exploit, may allow an attacker to execute arbitrary commands on this host subject to the privileges under which the web server operates. C...
Squid Proxy Server contains buffer overflow in parsing of the authentication portion of FTP URLs
Overview There is a remotely exploitable buffer overflow in the Squid proxy/cache server. Exploitation of this vulnerability could lead to an intruder gaining a shell on the target Squid server. Description Squid versions 2.3 and 2.4 are vulnerable to a buffer overflow in the code that parses FTP...
CUPS ippRead() attribute name buffer overflow
cups-ippread-bo 8192 High Risk CUPS ippRead attribute name buffer overflow Description: Common Unix Printing System CUPS versions 1.1.13 and earlier are vulnerable to a denial of service attack caused by a buffer overflow in the handling of attribute names in the ippRead function. By setting a ve...
[SA-2002:00] Slashcode login vulunerability
SA-2002:00 Slashcode login vulunerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a vulnerability in recent versions that allows any logged-in user to log in as any other user. This allows users to take nearly full control of a Slash system post...
FreeBSD-SA-02:01.pkg_add
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:01 Security Advisory FreeBSD, Inc. Topic: Directory permission vulnerability in pkgadd REVISED Category: core Module: pkginstall Announced: 2002-01-04 Revised: 2002-01-07...
[Exim] Potential security problem
From: Philip Hazel [email protected] To: [email protected], [email protected] Subject: Exim Potential security problem X-BeenThere: [email protected] Date: Wed, 19 Dec 2001 14:35:41 +0000 GMT Important. Please read. Amongst other things, Exim 3.34 and Exim 3.952 alpha for Exim 4, which ...
Problem with HP r-cmnds
Overview A problem existed with HP versions of the r-commands remshd, rexecd, rlogin, rlogind, remsh, rcp, rexec, rdist in use circa December, 1998. Description See HEWLETT-PACKARD COMPANY SECURITY BULLETIN: 00090, registration required 07 December 1998 for a description of the problem. No other...
GNOME libgtop Daemon Remote Format String
It seems that libgtop is/was running on this port and is vulnerable to a format string attack which may allow an attacker to gain a shell on this host with the privileges of 'nobody'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10812; scriptversion"1.20";...