1834 matches found
e107 website system Vulnerability
Informations : Advisory Name: e107 website system Vulnerability Author: hiruvim [email protected] Discover by: hiruvim [email protected] Website vendor : http://e107.org Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to get MySQL...
ZH2003-11SA (security advisory): Elite News Ver. 1.0.0.0-1.0.0.3 Beta
Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory: http://www.zone-h.org/en/advisories/read/id=2710 Author: Trash-80 -...
Another ProductCart SQL Injection Vulnerability
ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/ =============================================================================== Security Advisory Advisory Name: ProductCart SQL Injection Vulnerability Release Date: 06/20/2003 Application: ProductCar...
Real Server < 8.0.2 Remote Exploit (Windows Platforms)
Exploit for unknown platform in category remote exploits ====================================================== Real Server 8.0.2 Remote Exploit Windows Platforms ====================================================== // / THCunREAL 0.2 - Wind0wZ remote root exploit / / Exploit by: Johnny Cyberpu...
Positive Technologies SA2003-0310: DoS-attack in VisNetic ActiveDefense
Positive Technologies Security Advisory http://www.ptsecurity.com Title: DoS-attack in VisNetic ActiveDefense Date: March, 10 2003 Severity: High Application: VisNetic ActiveDefense 1.3.1 and early Platform: Windows 95/98/ME/NT/2000/XP Vendor Status: Notified, patched I. DESCRIPTION -------------...
Edonkey and Overnet resources consumption
Applications: Edonkey2000 http://www.edonkey2000.com Overnet http://www.overnet.com Versions: 0.45 and previous versions only the GUI program Platforms: Windows only Bug: The programs spawn a new dialog for each chat message that arrives to them, and each dialog take system resources Risk:...
[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download
Hi, all. We release the information about the vulnerability of Opera, here. And we hope that this vulnerability be fixed by Vendor immediately. ----------------------------------------------------------------- Synopsis: Opera 7/6 Long Filename Buffer Overflow Vulnerability in Download Product:...
Opera 6.07.0 - Filename Download Buffer Overrun
Opera 6.07.0 - Filename Download Buffer Overrun source: https://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when...
Opera 6.0/7.0 - 'Filename Download' Buffer Overrun
source: https://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when copying file names to a temporary buffer it may be...
Directory traversing bug in 'myServer' webserver.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- INetCop Security Advisory 2002-0x82-010 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= - Our 10th advisory does self-congratulation. Title: Directory traversing bug in 'myServer' webserver. 0x01. Description It's very useful Windows webserver that is offered by...
Netscape 4 Java buffer overflow
The Java implementation of Netscape 4 contains a buffer overflow vulnerability. Arbitrary code may be run on a Netscape user's system when a web page containing a malicious applet is viewed. The buffer overflow happens in the method canConvert of the class sun.awt.windows.WDefaultFontCharset. An...
liteserve.txt
Christopher Fillion's "Perception" web site hosts the LiteServe combination server for Win32. The server offers HTTP, FTP, SMTP, POP3, and Telnet services. Included in the HTTP service is a Common Gateway Interface CGI feature that allows you to specify a CGI alias, as well as "filters" that are...
Apache Httpd < 2.0.44 : Apache can serve unexpected files
On Windows platforms Apache could be forced to serve unexpected files by appending illegal characters such as '' to the request URL...
Cooolsoft PowerFTP Server 2.x - Remote Denial of Service (1)
// source: https://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user names. When excessive data is...
wp-02-0011: Jetty CGIServlet Arbitrary Command Execution
Westpoint Security Advisory Title: Jetty CGIServlet Arbitrary Command Execution Risk Rating: Medium Software: Jetty Servlet Container Platforms: Win32 other platforms not tested Vendor URL: www.mortbay.org Author: Matt Moore [email protected] Date: 1st October 2002 Advisory ID: wp-02-0011.txt...
IIL Advisory: Winamp 3 (1.0.0.488) XML parser buffer overflow vulnerability
Illegal Instruction Labs Advisory ------------------------------------------------------------------------ Advisory name: Winamp 3 1.0.0.488 XML parser buffer overflow vulnerability Application: Winamp 3 1.0.0.488 Homepage: www.winamp.com Impact: There is a buffer overflow inside XML parser DLL...
DEBIAN-CVE-2002-0654
Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...
Kerio Mail Server Multiple Security Vulnerabilities
Good Day. The information below is the same as the security advisory regarding kerio mail server. Thank YOU! ==================CUT======================= NSSI-Research Labs Security Advisory http://www.nssolution.com "Maximum e-security" http://nssilabs.nssolution.com Kerio Mail Server 5.0 Multip...
PHP Interpreter 3.0.x/4.0.x/4.1/4.2 - Direct Invocation Denial of Service
// source: https://www.securityfocus.com/bid/5280/info It is possible, under some circumstances, for remote attackers to invoke the PHP interpreter from the web. If the interpreter is invoked with no command line options, it will hang. Attackers may exploit this condition to cause a denial of...
Apache Tomcat 4.0.3 - Denial of Service Device Name Cross-Site Scripting
Apache Tomcat 4.0.3 - Denial of Service Device Name Cross-Site Scripting source: https://www.securityfocus.com/bid/5194/info A vulnerability has been reported for Apache Tomcat 4.0.3 on a Microsoft Windows platform. Reportedly, it is possible for an attacker to launch a cross site scripting attac...