6298 matches found
GLSA-200506-11 : Gaim: Denial of Service vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200506-11 Gaim: Denial of Service vulnerabilities Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de Bokkenrijder...
USN-139-1: Gaim vulnerability
A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented "a", a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member...
gaim -- Yahoo! remote crash vulnerability
Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol...
[NEWS] Clavister Firewall Multiple Vulnerabilities (Multiple DoS, Password String Filtering)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
LiteWEB Web Server 2.5 - Authentication Bypass
LiteWEB Web Server 2.5 - Authentication Bypass source: https://www.securityfocus.com/bid/13850/info LiteWeb Server is prone to a vulnerability that may let remote attackers bypass authentication. The specific issue is inadequate sanitization of user-supplied requests. In particular, there is an...
LiteWEB Web Server 2.5 - Authentication Bypass
source: https://www.securityfocus.com/bid/13850/info LiteWeb Server is prone to a vulnerability that may let remote attackers bypass authentication. The specific issue is inadequate sanitization of user-supplied requests. In particular, there is an error in the handling of slash characters '/'...
ClamAV antivirus MacOS X shell characters problem
Shell characters are not filtered in filename than external 'ditto' command in executed with system...
Neteyes Nexusway Multiservice Border Gateway multiple vulnerabilities
Shell characters filtering problem...
CVE-2004-1936
ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters...
CVE-2003-1188
Unichat allows remote attackers to cause a denial of service crash by adding extra chat characters avatars and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit...
CVE-2004-1973
DiGi Web Server allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request that contains a large number of / slash characters, which consumes resources when DiGi converts the slashes to \ backslash characters...
CVE-2004-1961
blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters "%27"...
dSMTP Mail Server 3.1b (Linux) - Format String
/ dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly more NOTE: before you start, chang...
CVE-2005-1331
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters su...
Open WebMail Shell Escape Arbitrary Command Execution
According to its banner, the version of Open WebMail installed on the remote host may allow execution of arbitrary shell commands due to its failure to ensure shell escape characters are removed from filenames and other strings before trying to read from them. %NASLMINLEVEL 70300 C Tenable Networ...
Invision Board Multiple XSS and SQL Injection
Binary data 2879.prm...
CVE-2005-0831
PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters...
CVE-2005-1198
Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters %00 in the middle of ".." sequences in the template parameter...
CVE-2005-0324
Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message...