UBUNTU-CVE-2015-7758

Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a 1 .aux, 2 .log, 3 .out, 4 .pdf, or 5 .toc extension for the file name, as demonstrated by .thesis.tex.aux...

CVE-2015-0879: Improper Input Validation

CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service application crash via a 1 CON, 2 AUX, or 3 NUL device name in the filename of an attachment...

PT-2017-1618

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.14.79 Description The issue is related to the keyring search aux function in the Linux kernel, which is associated with pointer dereference errors. This can be exploited by a local attacker to cause a denial of...

Hide passwords in ps aux for https git tasks

When git checkout tasks configured to use HTTPS run, the user and password are exposed in ps aux: noformat bamboo 15138 0.0 0.0 86752 2224 ? S May20 0:00 git-remote-https https://gituser:[email protected]/scm/consumer/XXXX.git...

The latest FCKeditor proof absolute path vulnerability-vulnerability warning-the black bar safety net

Code: FCKeditor/editor/filemanager/connectors/asp/connector. asp? Command=CreateFolder&Type=File&CurrentFolder=%2F&NewFolderName=aux Version not test it. Principle: create an aux folder, aux in the windows system is not supported, so will complain, broke the absolute path, this relatively...

Successful Shell Attack Detected - FreeBSD 'ps -aux' Command

Binary data 6150.prm...

PT-2011-4032

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.7 Wireshark versions 1.6.x through 1.6.0 Description The issue is caused by an off-by-one error in the elem cell id aux function in the ANSI MAP dissector. This error allows remote attackers to cause a deni...

Unfixed XSS vulnerability at www.commissariat-aux-comptes.net

Security researcher Vorpal, has submitted on 12/10/2010 a cross-site-scripting XSS vulnerability affecting www.commissariat-aux-comptes.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It...

systemtap: Crash with systemtap script using __get_argv()

Multiple integer signedness errors in the 1 getargv and 2 getcompatargv functions in tapset/auxsyscalls.stp in SystemTap 1.1 allow local users to cause a denial of service script crash, or system crash or hang via a process with a large number of arguments, leading to a buffer overflow...

CVE-2009-4587: Undefined Security Weakness

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

Re: Cherokee Web Server 0.5.4 Denial Of Service

This attack should only work on the Windows version of Cherokee Web Server, as it references a DOS-style special device, AUX. This attack can also be launched through a browser as follows: http://www.example.com/AUX...

CVE-2007-6326

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...

CVE-2007-6326: Improper Input Validation

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...

Simple HTTPd 1.41 - '/aux' Remote Denial of Service

usage: poc.py host port import socket import sys print "-----------------------------------------------------------------------" print "Simple HTTPD 1.3 /aux Denial of Service\n" print "url: http://shttpd.sourceforge.net\n" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "sit...

CVE-2002-2237

tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux...

CVE-2007-4632: Improper Authentication

Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a 1 VTY/AUX or 2 CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different...

BitchX 1.1-final (EXEC) Remote Command Execution Exploit

Exploit for linux platform in category remote exploits ======================================================== BitchX 1.1-final EXEC Remote Command Execution Exploit ======================================================== / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions:...

CVE-2007-2897: Undefined Security Weakness

Microsoft Internet Information Services IIS 6.0 allows remote attackers to cause a denial of service server instability or device hang, and possibly obtain sensitive information device communication traffic; and might allow attackers with physical access to execute arbitrary code after connecting...

[Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???

Hello List, Recently I saw a small bug in IIS 6.0 when requesting a special path. When I request /AUX/.aspx the server takes a bit longer to respond as Normally. So I did write an automated script to see what happens if I request this file several times at once. The result is that some servers On...

Microsoft IIS 6.0 - '/AUX / '.aspx' Remote Denial of Service

When sending multiple parallel GET requests to a IIS 6.0 server requesting /AUX/.aspx the server gets instable and non responsive. This happens only to servers which respond a runtime error System.Web.HttpException and take two or more seconds to respond to the /AUX/.aspx GET request. signed,...