4617 matches found
Дырка в Infobot
Стандартная ошибка перл - нефильтруется '|' в команде calc...
CVE-2000-1090
Microsoft IIS for Far East editions 4.0 and 5.0 are affected by CVE-2000-1090, where a malformed URL employing the lead-byte of a double-byte character allows remote attackers to read source code of parsed pages. The root cause is improper handling of lead-byte in double-byte character sequences ...
phf CGI Script fails to guard against newline characters
Overview This document describes a vulnerability in a CGI script known as phf which was widely exploited in 1996 and 1997. Description The phf CGI script constructs a partial command line consisting of the ph command and appropriate arguments, and completes the command line based on the input fro...
Дырка в midnight commander
некорректная обработка метасимволов в именах файла приводит к возможности выполнения shell-кода...
Problems with cons.saver
Hi, Many systems have a suid on cons.saver which is part of midnight commander package. Standard location of this binary is /usr/lib/mc/bin/cons.saver. There is a bug, which allows luser to write '0' char to any symlinkable file in system. So it can be very destructive, I wrote simple example of...
cons.saver.txt
Subject: Problems with cons.saver Author: Maurycy Prodeus Hi, Many systems have a suid on cons.saver which is part of midnight commander package. Standard location of this binary is /usr/lib/mc/bin/cons.saver. There is a bug, which allows luser to write '\0' char to any symlinkable file in system...
Debian 2.x RedHat 6.2 IRIX 56 Solaris 2.x - Mail Reply-To Field
Debian 2.x RedHat 6.2 IRIX 56 Solaris 2.x - Mail Reply-To Field source: https://www.securityfocus.com/bid/1910/info mail is a simple console e-mail client. A vulnerability exists in several vendors' distributions of this program. An attacker can compose an email message with a carefully-formed...
Potential Security Problem in bftpd-1.0.11
Subject : Potential security problem in bftpd Buffer Overflow Author : Christophe BAILLEUX [email protected] Plateforms : nix Test version : bftpd-1.0.11 I. Introduction bftpd is a Linux FTP server with chroot and setreuid. Not all FTP commands are included. It accesses either the user's home directo...
iis-unicode.txt
Recently I received an email from Par Osterberg that directed my attention to a post in the Packetstorm forums: http://209.143.242.119/cgi-bin/cbmc/forums.cgi?authkey=anonymous&uname=anonymous&datopic=Windows&mesgcheck=defined&gum=474&editoron= An anonymous person posts that they can run arbitrar...
CVE-2000-0671
The vulnerability CVE-2000-0671 affects Roxen Web Server prior to 2.0.69. An attacker can insert a null character (%00) into the URL to bypass access restrictions, list directory contents, and read source code, resulting in information disclosure. Affected component: Roxen Web Server (versions
CVE-2000-0591
Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL...
CVE-2000-0671
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character %00 to the URL...
CVE-2000-0671: Undefined Security Weakness
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character %00 to the URL...
Microsoft Internet Explorer 5.5 ASCII equivalent of "%01" security vulnerability....
The following security vulnerability has been found in Microsoft Internet Explorer version 5.5 When "" an undisplayable character, which is eaqual to the 1st caharacter in ASCII table - after the 0th... inserted in some strategic position in Javascript code ,it is possible to access to local fil...
extropia webstore 1.02.0 - Directory Traversal
extropia webstore 1.02.0 - Directory Traversal source: https://www.securityfocus.com/bid/1774/info Extropia WebStore is an e-commerce shopping cart application consisting of routines for error handling, order processing, encrypted mailing, frames, Javascript and VBscript. The routine webstore.cgi...
Format string input validation error in wu-ftpd site_exec() function
Overview A vulnerability involving an input validation error in the "site exec" command has recently been identified in the Washington University ftpd wu-ftpd software package. Sites running affected systems are advised to update their wu-ftpd software as soon as possible. A similar but distinct...
NetcPlus BrowseGate 2.80 - Denial of Service
NetcPlus BrowseGate 2.80 - Denial of Service source: https://www.securityfocus.com/bid/1702/info NetcPlus BrowseGate 2.80 will crash as the result of an invalid read error if a number of character strings consisting of 8 KB are inserted into GET request arguments through port 80. For example: GET...
Blue Panda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC12
================================================================= Blue Panda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC12 05/09/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: WFTPD will crash if a...
Roxen security alert: Problems with URLs containing null characters.
Roxen 2.0 up to version 2.0.68 has a vulnerability where using URLs containing null characters can gain the browser access to information he is not authorized to: Directory listings in directories with index files In normal filesystems: the sourcecode for RXML files, Pike scripts, CGIs etc...