3287 matches found
DEBIAN-CVE-2009-0843
The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists...
PT-2009-1135
Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services IIS version 5.0 Description The issue allows remote attackers to steal cookies and authentication credentials or bypass the HttpOnly protection mechanism. This is achieved by using the undocumented TRACK...
PT-2008-4686 · Apache · Apache Tomcat
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.31 Apache Tomcat version 5.5.0 Description: The issue allows remote attackers to bypass IP address restrictions and obtain sensitive information due to a synchronization problem and lack of thread...
PT-2008-3851 · Red Hat · Red Hat Network Satellite Server
Name of the Vulnerable Software and Affected Versions: Red Hat Network Satellite Server versions prior to 5.1.1 Description: The issue concerns a hard-coded authentication key in the manzier.pxt file, which allows remote attackers to connect to the server. This enables them to obtain sensitive...
security flaw
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service stack exhaustion and PHP crash via deeply nested arrays, which trigger deep recursion in the variable destruction routines...
CVE-2007-1982
Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 IncludeFilePHPClass, 2 ClassPath, and 3 class parameters to a rspa/framework/Controllerv5.php, and b...
PHP buffer overflow
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the 1 htmlentities or 2 htmlspecialchars functions...
DEBIAN-CVE-2005-1175
Heap-based buffer overflow in the Key Distribution Center KDC in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain valid TCP or UDP request...
zgv 5.5 Multiple Arbitrary Code Execution PoC Exploits
No description provided by source. Download: http://www.milw0rm.com/sploits/ximagezgv.tar.gz milw0rm.com 2004-10-28...
DEBIAN-CVE-2004-0772
Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 krb5 1.2.8 and earlier may allow remote attackers to execute arbitrary code...
PT-2004-2549 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP version 5.0.2 Description: The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, by sending a CD command with an invalid path containing a "../" sequence. Recommendations: For WS FTP...
Kerberos Version 5 Server Detection - UDP
Binary data 1162.prm...
DEBIAN-CVE-2004-0523
Multiple buffer overflows in krb5anametolocalname for MIT Kerberos 5 krb5 1.3.3 and earlier allow remote attackers to execute arbitrary code as root...
Solaris 2.5.1 (sparc) : 104893-02
SunOS 5.5.1: /kernel/sys/c2audit patch. Date this patch was last updated by Sun : Jul/01/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
DEBIAN-CVE-2003-0058
MIT Kerberos V5 Key Distribution Center KDC before 1.2.5 allows remote authenticated attackers to cause a denial of service crash on KDCs within the same realm via a certain protocol request that causes a null dereference...
PT-2002-2788 · Microsoft +1 · Ntfs +2
Name of the Vulnerable Software and Affected Versions: Eraser version 5.3 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...
CVE-2001-1507
OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...
sawmill-5.0.21.txt
Version: Sawmill 5.0.21 Vendor: Notified. Link: http://www.flowerfire.com/sawmill [email protected] http://vapid.betteros.org SawMill is a site log statistics package for UNIX, Windows and MacOS. I have been evaluating it under Linux. In my test configuration I have sawmill listening on port...
