658 matches found
STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability
STG Security Advisory: SSA-20041209-13 UseModWiki XSS vulnerability Revision 1.0 Date Published: 2004-12-09 KST Last Update: 2004-12-09 Disclosed by SSR Team [email protected] Summary ======== UseModWiki is one of famous wiki web applications. It has a cross-site scripting vulnerability...
CVE-2004-0139
Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...
GLSA-200403-09 : Buffer overflow in Midnight Commander
The remote host is affected by the vulnerability described in GLSA-200403-09 Buffer overflow in Midnight Commander A stack-based buffer overflow has been found in Midnight Commander's virtual filesystem. Impact : This overflow allows an attacker to run arbitrary code on the user's computer during...
clearswift.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- SySS-Advisory: Clearswift Mimesweeper Path Traversal Vulnerability - ------------------------------------------------------------------- Problem discovered: July 27th 2004 Vendor...
CVE-2004-0382
Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting...
BolinTech DreamFTP Server 1.0 - User Name Format String
// source: https://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash the server. Dream FTP Server...
Microsoft Windows Media Player ActiveX control allows execution of javascript in "already open" frames
Overview A vulnerability in the Windows Media Player may allow remote attackers to view the contents of local files on the victim's computer. Description Using the "LaunchURL" method of the Windows Media Player ActiveX control, a web page author may be able to circumvent the frame security featur...
Cisco VPN 3000 series concentrator does not properly handle malformed ISAKMP packets
Overview Cisco VPN 3000 series concentrators do not properly handle specially crafted Internet Security Association and Key Management Protocol ISAKMP packets, which can cause a vulnerable device to reload, denying service to legitimate users. Description According to information on the Cisco web...
wbboard 1.1.1 Cross Site Scripting Vulnerability
wbboard 1.1.1 Cross Site Scripting Vulnerability - ------------------------- Affected program : wbboard 1.1.1 is a phpBB-like PHP forum Vendor : http://www.woltlab.de/ Vulnerability-Class : Cross Site Scripting CSS OS specific : No Problem-Type : Joke severity : No risk SUMMARY 1.WBBoard allowed ...
IBM AIX lsfs utility invokes grep and lslv with relative pathnames
Overview The IBM AIX operating system contains a vulnerability in the lsfs utility that allows a local user to execute arbitrary code as root. Description The IBM AIX lsfs utility displays filesystem information such as mount points, permissions and volume sizes. To list this information, it...
Allaire ColdFusion Server contains vulnerability allowing unauthorized user read/delete access to files
Overview A vulnerability exists in Allaire ColdFusion Server which allows an attacker to have unauthorized read and delete access to files on the target host. Description A remotely exploitable vulnerability exists in the Allaire ColdFusion Server which could allow an attacker to have unauthorize...
klogd does not adequately handle NULL byte when parsing text using LogLine( )
Overview There is a denial-of-service vulnerability in certain distributions of the Linux kernel logging daemon klogd which could allow an attacker to cause klogd to hang. Description The Linux kernel logging daemon klogd can be forced to hang if it receives a null byte in a log message from the...
Lotus Domino Server Cross-Site Scripting Vulnerability
Lotus Domino Server Cross-Site Scripting Vulnerability ====================================================== Affected products: ================= Lotus Domino Server 5.0.6 http://www.lotus.com/home.nsf/welcome/domino/ Vendor status: ============= Notified: 18 Mar 2001 09:59:51 +0900 105 days...
Buffer Overflow in TIAtunnel-0.9alpha2
/ qitest1's security advisory 001 / Buffer Overflow in TIAtunnel-0.9alpha2 +Systems Affected Any system running TIAtunnel-0.9alpha2 +Program Description TIAtunnel is a simple IRC bouncer that allows access from a simple IPv4 box to any kind of well-known server. It has been written by tHE rECIdjV...
Hexyn / Securax Advisory #17 - Bison FTP Server Directory Traversal
Hexyn / Securax Advisory 16 - Ghetto FTP Server Directory Traversal Topic: Ghetto FTP Server Directory Traversal Announced: 2001-02-17 Affects: Ghetto FTP Server version 1.0 beta 1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...