4093 matches found
CVE-2003-0071
The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence that causes the terminal to enter a tight loop...
GLSA-200403-11 : Squid ACL [url_regex] bypass vulnerability
The remote host is affected by the vulnerability described in GLSA-200403-11 Squid ACL urlregex bypass vulnerability A bug in Squid allows users to bypass certain access controls by passing a URL containing '%00' which exploits the Squid decoding function. This may insert a NUL character into...
Neon < 0.23.8 Status Response Control Character Inclusion Vulnerability (deprecated)
Binary data 1778.prm...
Netscape/Mozilla Null Character Cookie Disclosure (deprecated)
Binary data 1310.prm...
CVE-2004-0760
Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character %00 in an FTP URI...
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded...
Oracle 9i - Multiple Vulnerabilities
Oracle 9i - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10871/info Reportedly, multiple unspecified Oracle products contain multiple unspecified vulnerabilities. The reported vulnerabilities include SQL-injection issues, buffer-overflow issues, and others. There have also...
Oracle 9i - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/10871/info Reportedly, multiple unspecified Oracle products contain multiple unspecified vulnerabilities. The reported vulnerabilities include SQL-injection issues, buffer-overflow issues, and others. There have also been reports that issues covered in th...
CVE-2004-0760
Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character %00 in an FTP URI...
CVE-2004-0595
The striptags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null \0 characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and...
CVE-2004-0600
Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...
Fedora Core 1 : squid-2.5.STABLE3-1.fc1 (2004-104)
Tue Mar 09 2004 Jay Fenlason 7:2.5.STABLE3-1.fc1 - Backport security fix for %00 hole. See CVE-2004-0189: The '%xx' URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass urlregex ACLs via a URL with a NULL '%00' character, which causes Squid to use only a portion...
CVE-2004-0632
CVE-2004-0632: Adobe Reader/Acrobat Reader 6.x is vulnerable to a buffer overflow caused by improper handling of NULL characters when splitting a filename path into components, allowing remote code execution via a crafted file with a long extension. The issue affects Adobe Reader 6.0 (and 6.0.x v...
PHP strip_tags protection bypass
Insertion null character into tag allow protection bypass for few browsers...
Microsoft Internet Explorer 5.0.1 - Style Tag Comment Memory Corruption
Microsoft Internet Explorer 5.0.1 - Style Tag Comment Memory Corruption source: https://www.securityfocus.com/bid/10816/info A heap overflow vulnerability has been discovered in Internet Explorer. It is reported that the issue presents itself when a comment character sequence that is not terminat...
RHEL 2.1 : Canna (RHSA-2002:261)
The Canna server, used for Japanese character input, has two security vulnerabilities including an exploitable buffer overflow that allows a local user to gain 'bin' user privileges. Updated packages for Red Hat Linux Advanced Server are available. Updated 13 Jan 2003 Added fixed packages for the...
HP-UX FTP code execution
It's possiblt to execute application on server by specifing '|' in filename...
security flaw
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords...
Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation
Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation source: https://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatte...
Vulnerability in YaBB forum (Perl version without SQL)
There's a vulnerability in non-SQL version of YaBB forum I've checked it with YaBB 1 Gold - SP 1.2 written in Perl -- it's not new, but is in use even nowadays. You can input almost anything into .txt file from boards directory. The "subject" form field isn't checked for "n" symbols, so creating ...