253 matches found
CVE-2009-4823: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter...
CVE-2009-2275: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...
Design/Logic Flaw
A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...
CVE-2008-1146
CVE-2008-1146 affects OpenBSD 2.8–4.2 where a PRNG using XOR with 3-bit hops (Algorithm X3) enables remote attackers to infer DNS transaction IDs from prior outputs, potentially enabling DNS cache poisoning on OpenBSD’s BIND modification. Impact per NVD indicates partial confidentiality, partial ...
CVE-2008-1146: Undefined Security Weakness
A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...
CVE-2007-3351
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
Code injection
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
CVE-2007-3351
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
CVE-2007-3351
CVE-2007-3351 affects SJPhone SIP soft phone 1.60.303c running on Dell Axim X3 with Windows Mobile 2003. A direct crafted INVITE can cause the device to transmit many RTP packets, resulting in a denial of service (device hang). No remediation or exploit details are provided in the supplied docume...
Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit
No description provided by source. / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original...
CVE-2007-1735
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
CVE-2007-1735
Corel WordPerfect Office X3 (version 13.0.0.565) is affected by a stack-based buffer overflow in the handling of the printer selection (PRS) name within a WordPerfect document. The issue allows user-assisted remote attackers to execute arbitrary code due to improper bounds checking when parsing a...
CVE-2007-1735
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow
Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp...
Corel Wordperfect Office X3 Stack Overflow
Product Name: Wordperfect X3 13.0.0.565 Vendor: http://www.corel.com Date: 28 March, 2007 Author: Jonathan So jonny @ nop-art dot net Advisory URL: http://www.nop-art.net/advisories/wpwinX3.txt I. DESCRIPTION A stack overflow vulnerability has been found in Wordperfect X3. The vulnerability could...
Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...
CVE-2007-1735: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...
Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow
/ wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original advisory:...