45 matches found
EUVD-2007-6425
Malware in sbrugna...
CVE-2007-6460
Multiple cross-site scripting XSS vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by 1 log.php or 2 logerror.php, a different vulnerability than CVE-2007-6459...
Anon Proxy Server 0.100/0.102 Remote Authentication Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27593/info Anon Proxy Server is prone to a remote buffer-overflow vulnerability because the application fails to sufficiently bounds-check user-supplied input. Successful exploits allow remote attackers to execute arbitra...
CVE-2008-0633
Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service exception via a user name with a large number of quotes, which triggers the overflow during escaping...
Buffer overflow
Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service exception via a user name with a large number of quotes, which triggers the overflow during escaping...
CVE-2008-0633
The CVE-2008-0633 entry covers Anon Proxy Server (versions up to 0.102) with a buffer overflow when user authentication is enabled. A username containing a large number of quotes triggers the overflow during escaping, enabling a remote denial of service . Connected documents confirm the affected ...
CVE-2008-0633
Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service exception via a user name with a large number of quotes, which triggers the overflow during escaping...
Anon Proxy Server buffer overflow
Buffer overflow on oversized username with double quote characters...
Anon Proxy Server <= 0.102 remote buffer overflow
====================================================================== Anon Proxy Server = 0.102 remote buffer overflow ====================================================================== Author: L4teral l4teral 4t gmail com Impact: remote buffer overflow Status: patch available...
Anon Proxy Server 0.1000.102 - Remote Authentication Buffer Overflow
Anon Proxy Server 0.1000.102 - Remote Authentication Buffer Overflow source: https://www.securityfocus.com/bid/27593/info Anon Proxy Server is prone to a remote buffer-overflow vulnerability because the application fails to sufficiently bounds-check user-supplied input. Successful exploits allow...
Anon Proxy Server 0.100/0.102 - Remote Authentication Buffer Overflow
source: https://www.securityfocus.com/bid/27593/info Anon Proxy Server is prone to a remote buffer-overflow vulnerability because the application fails to sufficiently bounds-check user-supplied input. Successful exploits allow remote attackers to execute arbitrary code in the context of the...
CVE-2007-6460
Multiple cross-site scripting XSS vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by 1 log.php or 2 logerror.php, a different vulnerability than CVE-2007-6459...
CVE-2007-6459
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...
CVE-2007-6459
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...
CVE-2007-6460
CVE-2007-6460 refers to multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server prior to 0.101. The affected software is Anon Proxy Server; the vulnerable component is the URI handling that is later displayed by log.php or logerror.php. The description consistently notes XSS enab...
CVE-2007-6460
Multiple cross-site scripting XSS vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by 1 log.php or 2 logerror.php, a different vulnerability than CVE-2007-6459...
CVE-2007-6459
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...
CVE-2007-6459
The CVE-2007-6459 entry affects Anon Proxy Server 0.100 (and likely 0.101). The vulnerability allows remote command execution via shell metacharacters in the host parameter to diagdns.php and in the host (and possibly the port) parameter to diagconnect.php. This is explicitly described as a separ...
Anon Proxy Server远程SHELL命令执行漏洞
Anon Proxy Server是一款支持多协议的代理服务程序。 Anon Proxy Server不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意SHELL命令。 问题是脚本不安全调用system函数，提交SHELL命令作为参数，可导致WEB权限执行。 Anon Proxy Server 0.100 目前没有解决方案提供： http://sourceforge.net/projects/anonproxyserver/ http://127.0.0.1/anonproxyserver0.100/diagdns.php?host=google.com%5C%...
