3171 matches found
SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Expl (meta)
Exploit for unknown platform in category remote exploits ==================================================================== SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit meta ==================================================================== This file is part of the Metasploit...
Citrix Program Neighborhood name buffer overflow
Added: 02/01/2006 CVE: CVE-2005-3652 BID: 15907 OSVDB: 21816 Background Citrix Presentation Server, formerly Citrix MetaFrame, allows applications to be deployed across a network to various client platforms, including Windows, Unix, Macintosh, DOS, and OS/2. The Program Neighborhood Agent running...
SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow (Metasploit)
SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...
Winamp playlist file buffer overflow
Added: 01/31/2006 CVE: CVE-2006-0476 BID: 16410 OSVDB: 22789 Background Winamp is a media player for Windows. Problem A buffer overflow in Winamp allows code execution when a specially crafted playlist file is opened. Resolution Upgrade to Winamp 5.13 or higher. References...
Trend Micro ServerProtect Management Console isaNVWRequest.dll chunked POST buffer overflow
Added: 01/24/2006 CVE: CVE-2005-1929 BID: 15865 OSVDB: 21771 Background ServerProtect is a virus scanner for servers. Problem A buffer overflow in ServerProtect Management Console could allow a remote attacker to execute commands using a chunked POST request to isaNVWRequest.dll. Resolution Use t...
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...
[Full-disclosure] Ultimate Auction <=3.67
Hello! I've found a XSS in Ultimate Auction =3.67. The Vendor was informed mid October 2005! They still haven't fix the script and doesn't reply to mails. Here's a little Example: http://www.ultimate-auction.de/cgi-local/auktion/item.pl/item.pl?item=scriptalert"XSS"/script...
Microsoft Exchange X-LINK2STATE buffer overflow
Added: 01/13/2006 CVE: CVE-2005-0560 BID: 13118 OSVDB: 15467 Background Microsoft Exchange is an e-mail server for Microsoft Windows operating systems. Problem A buffer overflow condition in the handling of the X-LINK2STATE extended verb could allow a remote attacker to execute arbitrary commands...
Apple QuickTime 6.46.57.0.x - PictureViewer .JPEG.PICT File Buffer Overflow
Apple QuickTime 6.46.57.0.x - PictureViewer .JPEG.PICT File Buffer Overflow source: https://www.securityfocus.com/bid/16212/info Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to...
Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow
source: https://www.securityfocus.com/bid/16212/info Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to finite-sized process buffers. An attacker may be able to exploit this issue to...
20051231.ie_xp_pfv_metafile.pm
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Intel Graphics Accelerator Driver - Remote Denial of Service
source: https://www.securityfocus.com/bid/16127/info The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an overly long text in a text area. This issue allows attackers t...
mozilla_compareto.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Intel Graphics Accelerator Driver - Remote Denial of Service
Intel Graphics Accelerator Driver - Remote Denial of Service source: https://www.securityfocus.com/bid/16127/info The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an...
Eudora WorldMail IMAP LIST command buffer overflow
Added: 12/30/2005 CVE: CVE-2005-4267 BID: 15980 OSVDB: 22097 Background Eudora WorldMail is an e-mail server for Windows. Problem A long IMAP command ending with a close brace character could result in a buffer overflow, leading to remote command execution. Resolution Upgrade to a version of Eudo...
Eudora WorldMail IMAP LIST command buffer overflow
Added: 12/30/2005 CVE: CVE-2005-4267 BID: 15980 OSVDB: 22097 Background Eudora WorldMail is an e-mail server for Windows. Problem A long IMAP command ending with a close brace character could result in a buffer overflow, leading to remote command execution. Resolution Upgrade to a version of Eudo...
phpBB viewtopic.php highlight parameter vulnerability
Added: 12/28/2005 CVE: CVE-2005-2086 BID: 14086 OSVDB: 17613 Background phpBB is an open-source bulletin board package written in PHP. Problem This is a variant of an older vulnerability which allows remote command execution by requesting viewtopic.php with a specially crafted highlight parameter...
Microsoft Windows XP/2003 - Metafile Escape() Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow
This module exploits a stack buffer overflow in the Qualcomm WorldMail IMAP Server version 3.0 builds 6.1.19.0 through 6.1.22.0. Version 6.1.22.1 fixes this particular vulnerability. NOTE: The service does NOT restart automatically by default. You may be limited to only one attempt, so choose...