60 matches found
PHP 3.0/4.0 Error Logging Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1786/info PHP is a scripting language designed for CGI applications that is used on many websites. There exists a remotely exploitable format string vulnerability in all versions of PHP below PHP 4.0.3. The vulnerability...
php -- NULL byte poisoning
PHP-specific version of NULL-byte poisoning was briefly described by ShAnKaR: Poison NULL byte vulnerability for perl CGI applications was described in 1. ShAnKaR noted, that same vulnerability also affects different PHP applications. PHP developers report that branch 5.3 received a fix: Paths wi...
Generic Web Application Unix Command Execution
$Id: genericexec.rb 10642 2010-10-11 19:30:57Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
HP OpenView Network Node Manage multiple security vulnerabilities
Vulnerabilities in multiple CGI applications...
Secunia Research: HP OpenView Network Node Manager Multiple Vulnerabilities
====================================================================== Secunia Research 07/01/2009 - HP OpenView Network Node Manager Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...
Preemptive Protection against HP OpenView Network Node Manager Buffer Overflows
HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. Several vulnerabilities were reported in HP OpenView Network Node Manager CGI applications, enabling a remote user to execute arbitrary code on the...
Buffer overflow
Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted Accept-Language HTTP header...
CVE-2008-2928
CVE-2008-2928 affects Red Hat Directory Server 7.1 with Service Pack 7. A buffer overflow in the adminutil CGI components can be triggered by a crafted Accept-Language HTTP header, allowing remote attackers to crash the daemon or possibly execute arbitrary code. Connected advisory RHSA-2008:0596 ...
Red Hat Directory Server接受语言HTTP头字段缓冲区溢出漏洞
BUGTRAQ ID: 30869 CVE ID: CVE-2008-2928 CNCVE ID：CNCVE-20082928 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Red Hat Directory Server包含的对个CGI应用吃呢供需处理Accept-Language HTTP头字段存在缓冲区溢出，远程攻击者可以利用漏洞以管理服务器应用程序权限执行任意指令。 能访问管理服务器WEB接口的攻击者可使用这个漏洞使这些CGI应用程序崩溃，或者可能以应用程序权限执行任意代码。注意：Red Hat Directory Server...
ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows
ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows http://www.zerodayinitiative.com/advisories/ZDI-07-071.html December 6, 2007 -- CVE ID: CVE-2007-6204 -- Affected Vendor: Hewlett-Packard -- Affected Products: OpenView Network Node Manager 7.51 and below -- TippingPointTM...
MyServer privilege escalation
suid is called before sgid for CGI applications...
Jetty directory traversal
Directory traversal on CGI apllications access...
phpBB 2.0.21 - Poison Null Byte Remote File Upload
phpBB 2.0.21 - Poison Null Byte Remote File Upload !/usr/bin/perl -w Author: ShAnKaR Title: multiple PHP application poison NULL byte vulnerability Applications: phpBB 2.0.21, punBB 1.2.12 Threat Level: Critical Original advisory in Russian: http://www.security.nnov.ru/Odocument221.html Poison NU...
lighttpd: Script source disclosure
Background lighttpd is a small-footprint, fast, compliant and very flexible web-server which is optimized for high-performance environments. Description lighttpd uses file extensions to determine which elements are programs that should be executed and which are static pages that should be sent...
CGI bugs from DWClan
13 vulnerable CGI applications are reported by DWClan...
Buffer overflow in Talentsoft Web+
Buffer overflows in CGI supplied applications, cookie processing...
Доступ к административному интерфейсу в PGP Keyserver (anauthorized access)
Через CGI-приложения можно получить доступ к административному интерфейсу без авторизации...
Очередные дырки в CGI
Различные проблемы в CGI-приложениях позволяют выполнение кода...
TalentSoft Web+ Client/Monitor/server 4.6 - Internal IP Address Disclosure
source: https://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+. It is possible for a remote user to retrieve the internal IP address in ...
