CVE-2003-0055

CVE-2003-0055 refers to a buffer overflow in the MP3 Broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1. The overflow can be triggered by a filename longer than 256 bytes, potentially allowing a remote attacker to execute arbitrary code ...

CVE-2003-0050

The CVE-2003-0050 issue affects Apple’s Darwin Streaming Administration Server (v4.1.2) and QuickTime Streaming Server (v4.1.1). It stems from parse_xml.cgi, where shell metacharacters injected by an attacker enable remote code execution. Multiple sources (NVD, CVE list, OpenVAS-style advisories)...

CVE-2003-0055

Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long filename...

CVE-2003-0051

CVE-2003-0051 affects Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1, where parse_xml.cgi can reveal the server installation’s physical path via a NULL file parameter. The issue enables remote access to sensitive path information and is part of a set of re...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0426

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator...

CVE-2003-0676

CVE-2003-0676 : A directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (Sun ONE) allows remote attackers to read arbitrary files via partially encoded dot-dot sequences ("..%2f"). The information available confirms the affected component and the underlying issue is a...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

Directory Traversal in Sun iPlanet Administration Server 5.1

Text of original posting to Sun: Originator: EDS Information Assurance Group - Jim Hardisty, Mark Brewis Date of Contact: 22nd April 2003 Issue:During a recent Penetration Test, a member of the team, Jim Hardisty, identified an issue with an installation of iPlanet Administration Express. It is...

iPlanet Administration Server directory traversal

Directory traversal during log view with 2f...

Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature...

CVE-2002-0665

CVE-2002-0665 : Macromedia JRun Administration Server has a login-bypass flaw where an extra slash in the URL allows remote attackers to bypass authentication. The entry is high severity (CVSS 2.0 base score 10.0, NETWORK attack vector, no authentication). Public technical details such as affecte...

CVE-2002-1785

Cross-site scripting XSS vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi...

[SECURITY] [DSA 185-1] New heimdal packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 185-1 [email protected] http://www.debian.org/security/ Martin Schulze October 31st, 2002 http://www.debian.org/security/faq -...

CVE-2002-0763

Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server...

CVE-2002-0763

The CVE-2002-0763 entry documents a vulnerability in the administration server of HP VirtualVault 4.5 on HP-UX 11.04. The issue permits remote web servers or privileged external processes to bypass access restrictions and establish connections to the HP VirtualVault server. Affected component is ...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...

CVE-2001-0949

CVE-2001-0949 affects ValiCert Enterprise Validation Authority (EVA) Administration Server, versions 3.3–4.2.1. The vulnerability is a buffer overflow in the forms.exe CGI program that enables remote attackers to execute arbitrary code by supplying long arguments to a set of parameters (Mode, Cer...

CVE-2001-0950

ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 uses insufficiently random data to 1 generate session tokens for HSMs using the C rand function, or 2 generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool ...

PT-2001-2103 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server

Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue arises from the use of insufficiently random data. This affects two main areas: 1 the generation of session tokens for HSMs,...