3082 matches found
[Full-Disclosure] iDEFENSE Security Advisory 08.25.04: Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability
Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.25.04 http://www.idefense.com/application/poi/display?type=vulnerabilities August 25, 2004 I. BACKGROUND Ipswitch WhatsUp Gold is a Microsoft Windows based network monitoring application. More information is...
GLSA-200401-02 : Honeyd remote detection vulnerability via a probe packet
The remote host is affected by the vulnerability described in GLSA-200401-02 Honeyd remote detection vulnerability via a probe packet A bug in handling NMAP fingerprints caused Honeyd to reply to TCP packets with both the SYN and RST flags set. Watching for replies, it is possible to detect IP...
BadBlue < 2.3 ISAPI Module Remote Administrative Interface Access
Binary data 2177.prm...
Samba Printer Change Notification DoS
DoS on FindNextPrintChangeNotify request processing...
popper_mod < 1.2.3 Administration Authentication Bypass
Binary data 1588.prm...
BeyondTrust Retina Scanner Detection
Binary data 9060.prm...
Web Server SSLv1 Detection
Binary data 1135.prm...
Winamp MIDI Plugin Track Size Overflow
Binary data 1952.prm...
BeyondTrust Retina Scanner Detection
Binary data 1158.prm...
[Full-Disclosure] iDEFENSE Security Advisory 08.16.04: CVS Undocumented Flag Information Disclosure Vulnerability
CVS Undocumented Flag Information Disclosure Vulnerability iDEFENSE Security Advisory 08.16.04 www.idefense.com/application/poi/display?id=130&type=vulnerabilities August 16, 2004 I. BACKGROUND CVS Concurrent Versions System is an open-source network-transparent version control system. II...
SQL Server Detection
Binary data 2131.prm...
Fortify 360 Web Interface Detection
Binary data 5007.prm...
Potential Microsoft SQL Injection Vulnerability Detection
Binary data 2002.prm...
GoScript go.cgi Arbitrary Command Execution
The remote host is running GoScript. The installed version fails to properly sanitize user-supplied input to the 'go.cgi' script. An unauthenticated, remote attacker could exploit this flaw to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
BasiliX login.php3 username Variable Arbitrary Command Execution
The remote host appears to be running a version of BasiliX between 1.0.2beta or 1.0.3beta. In such versions, the script 'login.php3' fails to sanitize user input, which enables a remote attacker to pass in a specially crafted value for the parameter 'username' with arbitrary commands to be execut...
CVE-2004-0701
Sun Ray Server Software SRSS 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access...
Re: [Full-Disclosure] THE VULNERABILITY STILL WORKS AFTER TODAY'S PATCH
Well it's not quite as easy as you make it sound I think you only took a look at http-equiv's example I posted to full disclosure and based your post on that. You see this: --snip-- iframe src="c:windowswebtip.htm" style="width:400px;height:200px;"/iframe textarea id="code" style="display:none;"...
[Full-Disclosure] iDEFENSE Security Advisory 06.08.04: Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability
Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.08.04 www.idefense.com/application/poi/display?id=107&type=vulnerabilities June 8, 2004 I. BACKGROUND Squid is a fully-featured Web Proxy Cache designed to run on Unix systems and supports...
Open WebMail Multiple Content Header XSS
The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross- site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary JavaScript code by reading a MIME message with a specially crafted...