4416 matches found
[Full-Disclosure] iDEFENSE Security Advisory 09.13.04b: Samba 3.x SMBD Remote Denial of Service Vulnerability
Samba 3.x SMBD Remote Denial of Service Vulnerability iDEFENSE Security Advisory 09.13.04b www.idefense.com/application/poi/display?id=139&type=vulnerabilities September 13, 2004 I. BACKGROUND Samba is a software suite that provides file and print services to SMB/CIFS clients, such as Microsoft...
[Full-Disclosure] Gadu-Gadu (all versions with image-send feature) Heap Overflow
Sec-Labs Team proudly presents: Gadu-Gadu all versions with image-send feature Heap Overflow by Lord YuP 12/09/2004 Severity: High / Critical - Remote Code Execution Version affected: Probably all versions with image-send feature Tested on ver. 6.0 build 149 the newest one released two days befor...
CVE-2004-0644
The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...
eZ/eZphotoshare Connection Saturation Remote DoS
The remote host runs eZ/eZphotoshare, a service for sharing and exchanging digital photos. This version is vulnerable to a denial of service attack. An attacker could prevent the remote service from accepting requests from users by quickly establishing multiple connections from the same host. C...
mpg123 Multiple Remote Overflows
Binary data 2265.prm...
CVE-2002-1118
TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service hang or crash via a SERVICECURLOAD command...
CVE-2002-1374
The COMCHANGEUSER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password...
CVE-2001-1351
Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers...
CVE-2004-0004
The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing...
CVE-2002-1113
summarygraphfunctions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the gjpgraphpath parameter to reference the location of the PHP code...
CVE-2002-1148
The default servlet org.apache.catalina.servlets.DefaultServlet in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet...
CVE-2002-1477
graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...
[security bulletin] SSRT4779 - rev.0 HP-UX Netscape NSS Library Suite SSLv2 remote buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01070 REVISION: 0 SSRT4779 HP-UX Netscape NSS Library Suite SSLv2 remote buffer overflow ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...
[Full-Disclosure] iDEFENSE Security Advisory 08.25.04: Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability
Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.25.04 http://www.idefense.com/application/poi/display?type=vulnerabilities August 25, 2004 I. BACKGROUND Ipswitch WhatsUp Gold is a Microsoft Windows based network monitoring application. More information is...
[SA12364] SugarCRM Unspecified Login Authentication Vulnerability
TITLE: SugarCRM Unspecified Login Authentication Vulnerability SECUNIA ADVISORY ID: SA12364 VERIFY ADVISORY: http://secunia.com/advisories/12364/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SugarCRM 1.x http://secunia.com/product/3845/ DESCRIPTION: An unspecified...
MusicDaemon 0.0.3 - Remote Denial of Service etcshadow Stealer (2)
MusicDaemon 0.0.3 - Remote Denial of Service etcshadow Stealer 2 / MusicDaemon Hello ...... bin::9797:0::::: ftp::9797:0::::: sshd::9797:0::::: ...... root@vortex:/test Server Side View: root@vortex:/test/musicdaemon-0.0.3/src ./musicd -c ../musicd.conf -p 1234 Using configuration: ../musicd.conf...
eGroupWare <= 1.0.00.003 Multiple Module XSS
The remote version of eGroupware is vulnerable to a cross-site scripting attack. This could allow a remote attacker to steal the cookies of a legitimate user by tricking them into clicking a maliciously crafted URL. eGroupware reportedly has other cross-site scripting vulnerabilities, though Ness...
NetWin CWMail.exe < 2.8a Remote Overflow
Binary data 1633.prm...