Lucene search
+L

6567 matches found

Packet Storm
Packet Storm
added 2005/07/08 12:00 a.m.90 views

Echo Security Advisory 2005.13

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV13$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in MetaCart e-Shop ---------------------------------------------------------------------------...

0.3AI score
SaveExploits0
securityvulns
securityvulns
added 2005/06/28 12:00 a.m.34 views

Nokia / Symbian mobile phones bluetooth DoS

0x09 0x0A characters in nickname causes bluetooth device to crasg on searching...

4.7AI score
SaveExploits0References1Affected Software1
CVE
CVE
added 2005/06/21 4:00 a.m.73 views

CVE-2001-1501

The CVE-2001-1501 entry concerns ProFTPD 1.2.1 (and possibly other versions) where the globbing logic can be abused by commands containing many wildcard or special characters. Reported changes: remote attackers can trigger a denial of service through CPU and memory exhaustion by crafting commands...

5CVSS7.2AI score0.38414EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2005/06/21 4:00 a.m.49 views

CVE-2001-1497

Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password...

6.4AI score0.02047EPSS
SaveExploits0References4
securityvulns
securityvulns
added 2005/06/21 12:00 a.m.37 views

Enterasys Vertical Horizon switches backdoor accounts

There is undocumented backdoor account tiger/tiger123, in addition some privileged control character combination are available to unprivileged user from console or telnet session...

3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2005/06/20 4:00 a.m.32 views

CVE-2005-1994

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e"...

6.7AI score0.01425EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2005/06/16 4:00 a.m.26 views

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

5CVSS6AI score0.02481EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2005/06/14 4:00 a.m.32 views

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

8.9AI score0.02481EPSS
SaveExploits0References11
NVD
NVD
added 2005/06/14 4:00 a.m.19 views

CVE-2005-1994

Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e"...

5CVSS6.7AI score0.01425EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2005/06/13 12:00 a.m.46 views

GLSA-200506-11 : Gaim: Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-11 Gaim: Denial of Service vulnerabilities Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de Bokkenrijder...

5CVSS5.6AI score0.02481EPSS
SaveExploits0References5
Ubuntu
Ubuntu
added 2005/06/10 3:54 p.m.68 views

USN-139-1: Gaim vulnerability

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented "a", a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member...

5CVSS5.4AI score0.02481EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2005/06/10 12:00 a.m.47 views

gaim -- Yahoo! remote crash vulnerability

Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol...

5CVSS6.5AI score0.02481EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2005/06/06 12:00 a.m.45 views

[NEWS] Clavister Firewall Multiple Vulnerabilities (Multiple DoS, Password String Filtering)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/06/03 12:00 a.m.32 views

LiteWEB Web Server 2.5 - Authentication Bypass

source: https://www.securityfocus.com/bid/13850/info LiteWeb Server is prone to a vulnerability that may let remote attackers bypass authentication. The specific issue is inadequate sanitization of user-supplied requests. In particular, there is an error in the handling of slash characters '/'...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2005/06/03 12:00 a.m.19 views

LiteWEB Web Server 2.5 - Authentication Bypass

LiteWEB Web Server 2.5 - Authentication Bypass source: https://www.securityfocus.com/bid/13850/info LiteWeb Server is prone to a vulnerability that may let remote attackers bypass authentication. The specific issue is inadequate sanitization of user-supplied requests. In particular, there is an...

0.3AI score
SaveExploits0
securityvulns
securityvulns
added 2005/05/28 12:00 a.m.36 views

ClamAV antivirus MacOS X shell characters problem

Shell characters are not filtered in filename than external 'ditto' command in executed with system...

4.3AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2005/05/12 12:00 a.m.29 views

Neteyes Nexusway Multiservice Border Gateway multiple vulnerabilities

Shell characters filtering problem...

3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.27 views

CVE-2004-1973

DiGi Web Server allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request that contains a large number of / slash characters, which consumes resources when DiGi converts the slashes to \ backslash characters...

6.6AI score0.0384EPSS
SaveExploits2References8
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.32 views

CVE-2003-1188

Unichat allows remote attackers to cause a denial of service crash by adding extra chat characters avatars and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit...

6.6AI score0.01697EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.30 views

CVE-2004-1961

blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters "%27"...

8.1AI score0.01361EPSS
SaveExploits1References4
Rows per page
Query Builder