5221 matches found
IRIX pmcd Denial of Service vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: pmcd Denial of Service vulnerability Number: 20020407-01-I Date: April 30, 2002 Reference: CAN-2000-1193 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that it is possible to feed...
ISC BIND < 4.9.7 / 8.1.2 Inverse-Query Remote Overflow
The remote BIND server, according to its version number, is vulnerable to an inverse query overflow which could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. This script replaces bindbof.nes include"compat.inc"; if description scriptid10329;...
Netwin Surge FTP Server does not adequately validate user input thereby allowing directory traversal
Overview Surge FTP Server 2.0a contains a directory traversal vulnerability. Description Surge FTP Server 2.0a allows remote users to list files outside the FTP root directory. --- Impact Attackers may list files from directories to which access was not granted. --- Solution Upgrade to version...
Apache Web Server vulnerable to DoS via crafted HTTP request
Overview Some versions of the Apache Web server are vulnerable to denial-of-service attacks by crafted HTTP requests. Description A vulnerability exists in some versions the Apache Web HTTPD Server running on Windows 98SE, Windows 2000 SP1, and OS/2. The vulnerability appears to be a bounds...
CNet CatchUp arbitrary code execution
Affected: Catchup 1.3 Vendor: CNET http://catchup.cnet.com/ Risk: medium Background: CNet CatchUp is a generic file scanner application aimed at detecting old versions of installed applications, and as a side-line, viruses, trojans and spyware. It is controlled by .RVP files which specify what...
[SECURITY] [DSA-106-2] updated rsync fix
Package : rsync Problem type : remote exploit Debian-specific: no In Debian Security Advisory DSA-106-1 we reported a exploitable problem in rsync. For details please see that advisory. Unfortunately the patch used to fix that problem broke rsync. This has been fixed in version 2.3.2-1.5 and we...
Webalizer < 2.01-09 Multiple XSS
Webalizer, a web server log analysis application, was detected on the remote host. This version of Webalizer has multiple cross-site scripting vulnerabilities that could allow malicious HTML tags to be injected in the reports. %NASLMINLEVEL 70300 This script was written by Georges Dagousset See t...
[SECURITY] [DSA-041-1] joe local attack via joerc
Package : joe Problem type : local exploit Debian-specific: no Christer Öberg of Wkit Security AB found a problem in joe Joes Own Editor. joe will look for a configuration file in three locations: the current directory, the users homedirectory $HOME and in /etc/joe. Since the configuration file c...
[SECURITY] [DSA 037-1] New versions of Athena Widget replacement libraries available
---------------------------------------------------------------------------- Debian Security Advisory DSA-037-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : nextaw, xaw3d,...
[SECURITY] [DSA 036-1] New version of Midnight Commander available
---------------------------------------------------------------------------- Debian Security Advisory DSA-036-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : mc...
Buffer overflow in MySQL < 3.23.31
Hi, all versions of MySQL 3.23.31 have a buffer-overflow which crashs the server and which seems to be exploitable ie. 4141414 in eip Problem : An attacker could gain mysqld privileges gaining access to all the databases Requirements : You need a valid login/password to exploit this Solution :...
[SECURITY] New version of nis released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 14, 2000 - ------------------------------------------------------------------------ Package : nis Problem type : local...
[SECURITY] New version of xchat released (update)
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman August 30, 2000 - ------------------------------------------------------------------------ Package : xchat Problem type : remote...
Splitvt exploit
Problem ======= Splitvt 1.6.3 contains a buffer overflow, if you have installed splitvt suid root like Debian/Redhat/etc, btw not slackware you should upgrade to 1.6.4. Solution ======= Debian users: see http://www.debian.org/security/2000/20000605a Redhat: Redhat did respond with a "that package...
[SECURITY] New version of bind released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 17, 1999 - ------------------------------------------------------------------------ The version bind that was distributed...
Excite for Web Server architext_query.pl Shell Metacharacter Arbitrary Command Execution
Excite for Webservers is installed. This CGI has a well-known security flaw that lets a remote attacker execute arbitrary commands with the privileges of the web server. Versions newer than 1.1. are patched. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
PHP Code Injection
phpWhois PHP Code Injection\nVulnerability Overview\nphpWhois and some of its forks in versions before 5.1.0 are prone to a\ncode injection vulnerability due to insufficient sanitization of returned\nWHOIS data. This allows attackers controlling the WHOIS information of a\nrequested domain to...
PT-2005-5562 · Gtk+ +1 · Gtk+ +1
Name of the Vulnerable Software and Affected Versions: GTK+ version 2.4.0 GTK+ versions prior to 2.8.6-r1 Description: The issue is related to an integer overflow in the GTK+ gdk-pixbuf XPM image rendering library, which can lead to a heap-based buffer overflow, allowing attackers to execute...
