72 matches found
AOL Instant Messenger AIM "Away" Message Remote Exploit
Exploit for unknown platform in category remote exploits ======================================================= AOL Instant Messenger AIM "Away" Message Remote Exploit ======================================================= / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by...
clearswift MIMEsweeper for Web 4.05.0 - Directory Traversal
clearswift MIMEsweeper for Web 4.05.0 - Directory Traversal source: https://www.securityfocus.com/bid/10918/info Clearswift MIMEsweeper For Web is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. To carry out an attack an attacker may...
unauthorized deletion of IPsec SAs in isakmpd, still
1 Abstract For nearly 10 months a handful of OpenBSD-developers is trying to fix a plethora of payload handling flaws in isakmpd. On 2004/01/13 they released something like a final patch to a broader public. The patch protects against some specific attacks, but does not solve the problem. 2...
PHP-Nuke Error Manager Module 2.1 - 'error.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issues may be leveraged to carry out...
CVE-2003-1027
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching SaveRef to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different...
RealPlayer 9 *nix - Local Privilege Escalation
RealPlayer 9 nix - Local Privilege Escalation / rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the...
PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit (poptop-sane.c)
No description provided by source. / Fixed Exploit against PoPToP in Linux poptop-sane.c ./r4nc0rwh0r3 of blightninjas [email protected] blightninjas: bringing pain, suffering, and humiliation to the security world Expect more great release like helloworld-annotated.c and cd explained...
CVE-2002-1544
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. dot dot sequences in the commands 1 LIST ls, 2 mkdir, 3 put, or 4 get...
Cisco Systems - Vulnerability in CDP
-----BEGIN PGP SIGNED MESSAGE----- This is not a Cisco security advisory. There is a vulnerability in how Cisco routers are handling CDP. By sending a large amount of CDP neighbor announcements it is possible to consume all available router's memory. That will cause a crash or some other abnormal...
DoS против Watchguard Firebox
connect-flood приводит к отказу в обслуживании...
NSFOCUS SA2000-05: Microsoft Windows 9x NETBIOS password verification vulnerability
NSFOCUS Security AdvisorySA2000-05 TopicЈє Microsoft Windows 9x NETBIOS password verification vulnerability Release DateЈє August 24, 2000 Update DateЈє Oct 11 , 2000 Affected SystemЈє ================ - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition - Microsoft...
ipchains_patch.txt
Subject: Linux 2.2.10 ipchains Advisory To: [email protected] Linux ipchains Firewall Vulnerability data protect GmbH - Advisory 2 July 27, 1999 Authors: Thomas Lopatic John McDonald Overview -------- data protect has discovered a potential vulnerability in the Linux ipchains firewall...