Microsoft Windows Media Player fails to properly evaluate URLs when downloading skin files

Overview Microsoft Media Player contains a vulnerability in the parsing of "Skin Files" that may permit a remote attacker to download arbitrary files to a known location on the local system. Description Microsoft Media Player is an application that plays various types of media files. The user can...

Opera < 7.11 Filename Extension Handling Overflow

The version of Opera installed on the remote host has a buffer overflow condition in the code which handles the file extensions of the remote web pages. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host visit it using Opera. He would then be able to...

EZ Publish 2.2.73.0 - Multiple Cross-Site Scripting Vulnerabilities

EZ Publish 2.2.73.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/7348/info Several cross site scripting vulnerabilities have been reported for eZ Publish. These vulnerabilities are due to insufficient sanitization of user-supplied data submitted to eZ...

BEA WebLogic 7.0 - Hostname/NetBIOS Name Remote Information Disclosure

source: https://www.securityfocus.com/bid/7257/info It has been reported that some types of requests may result in sensitive information disclosure. From this, an attacker may be able to launch a more organized attack against vulnerable hosts. GET . HTTP/1.0\r\n\r\n And also: ./ .// .////////////...

BEA WebLogic 7.0 - HostnameNetBIOS Name Remote Information Disclosure

BEA WebLogic 7.0 - HostnameNetBIOS Name Remote Information Disclosure source: https://www.securityfocus.com/bid/7257/info It has been reported that some types of requests may result in sensitive information disclosure. From this, an attacker may be able to launch a more organized attack against...

CVE-2003-1074

Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges...

CVE-2003-0156

Directory traversal vulnerability in Cross-Referencing Linux LXR allows remote attackers to read arbitrary files via .. dot dot sequences in the v parameter...

AdMan 1.0.20051221 - ViewStatement.php SQL Injection

AdMan 1.0.20051221 - ViewStatement.php SQL Injection source: https://www.securityfocus.com/bid/17208/info AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

Wordit Logbook 098b3 - Logbook.pl Remote Command Execution

Wordit Logbook 098b3 - Logbook.pl Remote Command Execution source: https://www.securityfocus.com/bid/7043/info A remote command execution vulnerability has been discovered in the Wordit Logbook application. This issue occurs due to insufficient sanitization of externally supplied data to the...

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow (4)

XFree86 4.2 - XLOCALEDIR Local Buffer Overflow 4 // source: https://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR...

MySQL < 3.23.55 mysql_change_user() Double-free Memory Pointer DoS

According to its banner, a version of MySQL before 3.23.55 is running on the remote host. If you have not patched this version, then an attacker with valid credentials may be able to crash this service remotely by exploiting a double free bug. Further exploitation to gain a shell on the host migh...

Microsoft Windows XPME - Help and Support Center Buffer Overflow

Microsoft Windows XPME - Help and Support Center Buffer Overflow // source: https://www.securityfocus.com/bid/6966/info The Microsoft Windows ME Help and Support Center is prone to a buffer overflow. This is due to insufficient bounds checking on input supplied through the HCP URI parameter. An...

Cisco Security Advisory: Multiple Product Vulnerabilities found by PROTOS SIP Test Suite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Product Vulnerabilities found by PROTOS SIP Test Suite Revision 1.0 INTERIM For Public Release 2003 February 21 UTC 1700 - ------------------------------------------------------------------------------- Contents Summa...

3Com SuperStack 3 NBX 4.0/4.1 - FTPD Denial of Service

source: https://www.securityfocus.com/bid/6297/info It has been reported that the ftpd server, included in the Embedded Real Time Operating System ERTOS of 3Com Superstack 3 NBX IP phones, contains a denial of service vulnerability. This issue can be triggered by sending a CEL paramater of...

Key Focus KF Web Server 1.0.8 - Directory Traversal

Key Focus KF Web Server 1.0.8 - Directory Traversal source: https://www.securityfocus.com/bid/6180/info KeyFocus KF Web Server is vulnerable to a directory traversal attack. This is due to the web server's inability to properly handle file names containing consecutive dot characters. By exploitin...

QNX RTOS 6.2 - Application Packager Non-Explicit Path Execution

QNX RTOS 6.2 - Application Packager Non-Explicit Path Execution source: https://www.securityfocus.com/bid/6146/info A vulnerability has been discovered in an application packager shipped with QNX RTOS. It should be noted that the vulnerable packager is installed setuid root by default. It has bee...

LPRNG html2ps 1.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/6079/info A vulnerability has been discovered in the html2ps filter which is included in the lprng print system. It has been reported that it is possible for a remote attacker to execute arbitrary commands. The attacker must reportedly already have access...

SurfControl SuperScout WebFilter for Windows 2000 - File Disclosure

SurfControl SuperScout WebFilter for Windows 2000 - File Disclosure source: https://www.securityfocus.com/bid/5857/info SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files. The Reports Server does...

FTP Server Traversal Arbitrary File Access

The remote FTP server allows users to browse the entire remote disk by issuing commands with traversal style characters. An attacker could exploit this flaw to gain access to arbitrary files. TRUSTED...

Mozilla Bonsai 1.3 - Full Path Disclosure

source: https://www.securityfocus.com/bid/5517/info A path disclosure vulnerability has been reported in Mozilla Bonsai. An attacker can exploit this vulnerability by making a malformed request to Bonsai. This causes Bonsai to return an error page to the requesting user. This error page will...