4416 matches found
eMule Malformed Data Handling Remote DoS
It was possible to disable the remote eMule client by connecting to this port and sending malformed data. C Tenable Network Security, Inc. Ref: Date: Tue, 25 Mar 2003 13:03:13 +0000 From: Auriemma Luigi To: [email protected] Subject: Emule 0.27b remote crash include"compat.inc";...
CVE-2003-0028
Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...
Planetmoon - Guestbook Clear Text Password Retrieval
source: https://www.securityfocus.com/bid/7167/info A vulnerability has been reported in Planetmoon Guestbook. It has been reported that remote users may be able to retrieve clear text password lists. Access to this data may allow an attacker to carry out further attacks against a target user...
CVE-2002-1523
Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via 1 ../ dot-dot slash or 2 ..\ dot-dot backslash sequences...
CVE-2002-1422
The CVE-2002-1422 issue affects FUDforum prior to 2.2.0. Vulnerable component: admbrowse.php. Root cause: the cur and dest parameters allow URL-encoded pathnames to be used in a way that enables remote attackers to create or delete files. Impact: file creation/deletion via the web interface, with...
Microsoft IIS fpcount.exe CGI Remote Overflow
Nessus detected the 'fpcount.exe' CGI on the remote web server. Some versions of this CGI have a remote buffer overflow vulnerability. A remote attacker could exploit it to crash the web server, or possibly execute arbitrary code. Nessus did not actually check for this flaw, but solely relied on...
VPOPMail 0.9x - 'vpopmail.php' Remote Command Execution
source: https://www.securityfocus.com/bid/7063/info A vulnerability has been reported for VPOPMail that may allow attackers to execute arbitrary commands on a vulnerable system. The vulnerability exists due to insufficient sanitization of user-supplied input. As the vpopmail.php script does not...
CVE-2003-0108
isakmpsubprint in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service CPU consumption via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop...
ISC BIND < 9.2.2 DNS Resolver Functions Remote Overflow
The remote BIND 9 DNS server, according to its version number, is vulnerable to a buffer overflow which may allow an attacker to gain a shell on this host or to disable this server. C Tenable Network Security, Inc. Ref: https://www.isc.org/downloads/bind/...
CVE-2003-0101
miniserv.pl in 1 Webmin before 1.070 and 2 Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns CRLF in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges...
Typo3 3.5 b5 - 'Translations.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/6984/info TYPO3 is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remote user-supplied data. Under some circumstances, ...
[EXPL] RealServer 8 Remote Buffer Overflow Vulnerability (Exploit, SETUP, RTSP)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security would like to welcome Tiscali World Online to our service provider team. For more info on their service offering IP-Secure,...
DotBr 0.1 - System.php3 Remote Command Execution
DotBr 0.1 - System.php3 Remote Command Execution source: https://www.securityfocus.com/bid/6866/info The DotBr 'system.php3' script is prone to a remote command execution vulnerability. This is due to insufficient sanitization of user-supplied data. Exploitation may result in execution of arbitra...
myphpPageTool 0.4.3-1 - Remote File Inclusion
myphpPageTool 0.4.3-1 - Remote File Inclusion source: https://www.securityfocus.com/bid/6744/info myphpPageTool is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in several PHP script files in the /doc/admin folder. Under some...
myphpPageTool 0.4.3-1 - Remote File Inclusion
source: https://www.securityfocus.com/bid/6744/info myphpPageTool is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in several PHP script files in the /doc/admin folder. Under some circumstances, it is possible for remote...
[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 233-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2003 http://www.debian.org/security/faq -...
Multiple Vulnerabilties In PHPLinks
phpLinks is an open source free PHP script. phpLinks allows you to run a very powerful link farm or search engine. phpLinks has multilevel site categorization, infinite threaded search capabilities and more. phpLinks is very simple to setup There lies a fault in the include/add.php script that...
[SECURITY] [DSA 231-1] New dhcp3 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 231-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2003 http://www.debian.org/security/faq -...
CVE-2002-1390
The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbitrary files via a crafted URL...
CVE-2003-0013
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by...