CVE-2005-0174

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...

CVE-2005-0238

The International Domain Name IDN support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...

CVE-2005-0237

The CVE-2005-0237 issue affects Konqueror 3.2.1 (KDE 3.2.1): IDN support allows spoofing of domain names using punycode/homograph characters in URLs and SSL certificates, enabling phishing. Mitigation is to install the KDE/kdelibs3 security updates referenced by multiple advisories (e.g., SUSE-SA...

CVE-2005-0238

CVE-2005-0238 concerns the International Domain Name (IDN) support in Epiphany, where punycode-encoded domain names decoded in URLs and SSL certificates can be interpreted using homograph characters from other scripts. This enables remote attackers to spoof legitimate domain names and facilitates...

CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

Konversation KDE IRC client multiple vulnerabilities

Special characters filtering problem...

Squirrelmail vacation plugin shell characters problem

Unfiltered shell characters on ftpfile external program invocation...

KDE FTP KIOslave: Command injection

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KDE provided KIOslaves for many protocols in the kdelibs package, one of them being FTP. These are used by KDE applications such as Konqueror. Description The FTP KIOslave fails to properly...

Multiple JunkieFTP bugs

Shell characters problem. directory traversal...

greed -- insecure GRX file processing

A buffer overflow vulnerability has been detected in the greed URL handling code. This bug can especially be a problem when greed is used to process GRX GetRight files that originate from untrusted sources. The bug finder, Manigandan Radhakrishnan, gave the following description: Here are the bug...

CVE-2004-0284

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

TC-IDE unfiltered shell characters problem

Shell characters filtering problem on external program execution in multiple utilities...

CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

Microsoft Internet Explorer Double Byte Character Set Handling Address Bar Spoofing Vulnerability

Description It is reported that Microsoft Internet Explorer is prone to a vulnerability that may allow a malicious Web page to spoof the address bar of the browser. This vulnerability presents itself due to a malfunction that occurs when certain double byte characters are encountered. As a result...

Flash Messaging DoS

Problem with handling some Unicode characters...

MaxDB DoS

Invalid non-ASCII characters handling in IsAscii7 function...

CVE-2004-1698

The Base64 function in PopMessenger 1.60 before 20 Sep 2004 and earlier allows remote attackers to cause a denial of service application crash via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash...

Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow

source: https://www.securityfocus.com/bid/11169/info Mozilla is prone to a remotely exploitable heap overflow that is exposed when the browser handles non-ASCII characters in URIs. This issue could be exploited by enticing a user to open a hyperlink that references a malicious URI. Successful...

rkdetect updated

Добавлена поддержка национальных символов в именах служб и вывод полной информации о подозрительной службе. Regards, Sergey V. Gordeychik, MCSE since NT 4.0, MCSA, MCT. Авторизованный курс компании Microsoft по обеспечению безопасности корпоративной сети "Основы сетевой безопасности" в Учебном...