6744 matches found
Malformed vsprintf in bftpd
There is a malformed vsprintf in bftpd 1.0.12 in function sendstrf: int sendstrfint s, char format, ... .... vsprintfbuffer, format, val; when the function is called from NLIST command: else foo = 1; sendstrfs, entry-dname; This can be used to overflow the buffer of the vsprintf and execute...
Дырка в Apache + PHP3 под Windows
Проблема обратного пути в директориях при использовании спец-символов...
Дырки в WFTPD
Большое число расширенных ASCII-символов в строке приводит к переполнению буфера. Кроме того, имеется несколько недокументированных макросов, например C позволяет выяснить физическое расположение файлов...
Дырка в 24Link Webserver (avoid password protection )
Добавление спец символов к имени файла позволяет обойти защиту файла паролем...
Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (3)
Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 3 // source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution fo...
CVE-2000-0708
Affected product: Pragma Systems TelnetServer 2000, version 4.0. Vulnerability: buffer overflow in the rexec port handling, triggered by a long series of null characters. Impact: remote attacker could cause a denial of service. Exploitation status: not provided in the documents. Remediation: no f...
extropia webstore 1.0/2.0 - Directory Traversal
source: https://www.securityfocus.com/bid/1774/info Extropia WebStore is an e-commerce shopping cart application consisting of routines for error handling, order processing, encrypted mailing, frames, Javascript and VBscript. The routine webstore.cgi does not properly handle the $fileextension...
RedHat 6.2/7.0 Tmpwatch - Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/1785/info A vulnerability exists in tmpwatch, a utility which automates the removal of temporary files in unix-like systems. An optional component of tmpwatch, fuser, improperly handles arguments to system library calls. If an attacker creates a file...
PragmaSys TelnetServer 2000 - rexec Buffer Overflow
PragmaSys TelnetServer 2000 - rexec Buffer Overflow source: https://www.securityfocus.com/bid/1605/info Pragma Systems offers a windows remote access server called TelnetServer 2000. TelnetServer crashes if more than 1000 NULL characters are sent to its rexec port, 512. This can be executed by an...
PragmaSys TelnetServer 2000 - rexec Buffer Overflow
source: https://www.securityfocus.com/bid/1605/info Pragma Systems offers a windows remote access server called TelnetServer 2000. TelnetServer crashes if more than 1000 NULL characters are sent to its rexec port, 512. This can be executed by an anonymous attacker from anywhere on the internet. I...
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...
Уязвимость в Novell Border Manager
Пользователь может получить доступ к блокированной URL применив специальные символы xx в имени директории...
CVE-2000-0591
Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL...
CVE-2000-0258
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability...
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...
Eterm 0.8.10 / rxvt 2.6.1 / PuTTY 0.48 / X11R6 3.3.3/4.0 - Denial of Service
// source: https://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack against the client and even the host running the client. What makes it...
Eterm 0.8.10 rxvt 2.6.1 PuTTY 0.48 X11R6 3.3.34.0 - Denial of Service
Eterm 0.8.10 rxvt 2.6.1 PuTTY 0.48 X11R6 3.3.34.0 - Denial of Service // source: https://www.securityfocus.com/bid/1298/info xterm is a popular X11-based terminal emulator. If VT control-characters are displayed in the xterm, they can be interpreted and used to cause a denial of service attack...
Ezboard bug
============================================================================= Securax-SA-03 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Ezboard ver. 5.3.9 can be caused unreachable. Announced: 2000-05-24...