3626 matches found
CVE-2003-0194
tcpdump does not properly drop privileges to the pcap user when starting up...
CVE-2003-0190
...
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...
CVE-2002-1006
Cross-site scripting XSS vulnerability in BBC Education Text to Speech Internet Enhancer Betsie 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl...
CVE-2002-0975
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control xweb.ocx 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter...
Immunity Canvas: OPENSSL_KEYLEN
Name| opensslkeylen ---|--- CVE| CVE-2002-0656 Exploit Pack| CANVAS Description| OpenSSL keyarglen Overflow Notes| References: http://www.openssl.org/news/secadv20020730.txt CVE Name: CVE-2002-0656 VENDOR: OpenSSL Repeatability: Multiple WARNING: On busy webservers it might require couple of...
CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...
CVE-2001-1362
Vulnerability in the server for nPULSE before 0.53p4...
CVE-2001-1365
Vulnerability in IntraGnat before 1.4...
CVE-2002-0471
PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the aquery variable...
AlienForm2 alienform.cgi Traversal Arbitrary File Manipulation
The AlienForm CGI script allows an attacker to view any file on the target computer, append arbitrary data to an existing file, and write arbitrary data to a new file. The AlienForm CGI script is installed as either af.cgi or alienform.cgi. %NASLMINLEVEL 70300 This script was written by Andrew...
CVE-2002-0299
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension such as .BAT, which is executed during a scan...
CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root...
CVE-2001-1192
Citrix Independent Computing Architecture ICA Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client...
Immunity Canvas: DTSPCD
Name| dtspcd ---|--- CVE| CVE-2001-0803 Exploit Pack| CANVAS Description| dtspcd Notes| References: http://xforce.iss.net/alerts/advise101.php http://www.kb.cert.org/vuls/id/172583 CVE Name: CVE-2001-0803 VENDOR: Sun Date public: Nov 06, 2001 CERT Advisory:...
CVE-2001-1455
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters...
CVE-2001-1362
Vulnerability in the server for nPULSE before 0.53p4...