2753 matches found
Qualcomm Eudora 6.0.1/6.1.1 - Attachment LaunchProtect Warning Bypass (2)
source: https://www.securityfocus.com/bid/9101/info A problem has been identified in the implementation of LaunchProtect within Eudora. Because of this, it may be possible to trick users into performing dangerous actions. May 21, 2004 - Eudora version 6.1.1 has been released, however, it is...
Opera 7.22 - File Creation and Execution (WebServer)
Opera 7.22 - File Creation and Execution WebServer !/usr/bin/perl Sample code of "Opera 7 Arbitrary File Auto-Saved Vulnerability." This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small...
CVE-2003-0793
GDM 2.4.4.x before 2.4.4.4, and 2.4.1.x before 2.4.1.7, does not restrict the size of input, which allows attackers to cause a denial of service memory consumption...
Apache < 1.3.29 Multiple Modules Local Overflow
The remote host appears to be running a version of the Apache web server which is older than 1.3.29. Such versions are reportedly affected by local buffer overflow vulnerabilities in the modalias and modrewrite modules. An attacker could exploit these vulnerabilities to execute arbitrary code in...
OpenSSL ASN.1 Parser Multiple Remote DoS
The remote host seems to be running a version of OpenSSL that is older than 0.9.6k or 0.9.7c. There is a heap corruption bug in this version that might be exploited by an attacker to execute arbitrary code on the remote host with the privileges of the remote service. TRUSTED...
Pine <= 4.56 Remote Buffer Overflow Exploit
No description provided by source. / Mon Sep 15 09:35:01 CEST 2003 remote? Pine = 4.56 exploit by sorbo sorbox yahoo com darkirco Ok won't talk much about the bug since as usual idefense advisories are proper advisories and explain everything... exploiting the bug is trivial after reading the adv...
ChatZilla 0.8.23 - Remote Denial of Service
ChatZilla 0.8.23 - Remote Denial of Service // source: https://www.securityfocus.com/bid/8627/info It has been reported that ChatZilla is prone to a denial of service vulnerability. The problem arises as a remote attacker posing as an IRC server sends specially crafted requests to the client...
CVE-2003-0685
Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response...
DameWare Mini-RC Shatter
Program: DameWare Mini Remote Control Server Version: Prior to 3.71.0.0 Impact: Users can escalate to SYSTEM Discovered: ash Writeup and exploits: ash 1 Background From DameWare Development web site: A lightweight remote control intended primarily for administrators and help desks for quick and...
Horde IMP IMP_MIME_Viewer_html Class XSS
The remote server is running at least one instance of IMP whose version number is between 3.0 and 3.2.1 inclusive. Such versions are vulnerable to several cross-scripting attacks whereby an attacker can cause a victim to unknowingly run arbitrary JavaScript code simply by reading an HTML message...
Pi3Web 2.0.1 - GET Denial of Service
Pi3Web 2.0.1 - GET Denial of Service // source: https://www.securityfocus.com/bid/7555/info It has been reported that Pi3Web server is prone to a denial of service vulnerability. Reportedly, when a malicious GET request is sent to the Pi3Web server the server will fail. It should be noted that th...
Onecenter Forum 4.0 - IMG Tag Script Injection
Onecenter Forum 4.0 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/7441/info OneCenter ForumOne 4.0 is a full-featured, web-based group discussion forum. A problem with Onecenter ForumOne could allow remote users to execute arbitrary code in the context of the web site hosti...
PoPToP 1.1.3-b31.1.3-20030409 - Negative Read Overflow (Metasploit)
PoPToP 1.1.3-b31.1.3-20030409 - Negative Read Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Interbase/Firebird - external file security bug
Class: IB/FB can create or modify all accessible files on disk Remote: YES Localy: YES Vulnerable: IB 6.01, IB6.5, FB 1.0.2 WIN/Linux Not Vulnerable: IB7.0 Not Tested: FB 1.5 Beta Overview: IB/FB support external file for table. Data store in raw format and there isn't access rectriction. If file...
CVE-2002-0802
The multibyte support in PostgreSQL 6.5.x with SQLASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks...
CVE-2002-0984
The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code...
Sendmail < 8.12.9 NOCHAR Control Value prescan Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a remote buffer overflow allowing remote users to gain root privileges. Sendmail versions from 5.79 to 8.12.8 are vulnerable. NOTE: manual patches do not change the version numbers. Vendors who have released patched...
Gupta SQLBase EXECUTE Command Remote Overflow
The remote host is running a version of the Gupta SQLBase server which is older than or equal to 8.1.0. An error in the 'Execute' command makes it possible to trigger a buffer overflow by supplying more than 700 characters as the parameter. A remote, authenticated attacker, exploiting this flaw,...
Sendmail < 8.9.3 Header Prescan Function Message Header DoS
The remote Sendmail server, according to its version number, allows remote attackers cause a denial of service by sending messages with a large number of headers. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised plugin title, output formatting, soluti...
ISC BIND < 9.2.2 DNS Resolver Functions Remote Overflow
The remote BIND 9 DNS server, according to its version number, is vulnerable to a buffer overflow which may allow an attacker to gain a shell on this host or to disable this server. C Tenable Network Security, Inc. Ref: https://www.isc.org/downloads/bind/...