CVE-2002-0122

CVE-2002-0122 affects Siemens 3568i WAP mobile phones. The vulnerability enables a remote denial-of-service (crash) when an SMS containing unusual characters is received. The Connected documents provide the affected product and impact but do not specify exploit status or a concrete remediation. N...

CVE-2002-0122

Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service crash via an SMS message containing unusual characters...

CVE-2002-0102: Undefined Security Weakness

Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via 1 a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and 2 a request to TCP port 4000 with a large number of "." characters...

CVE-1999-1297

Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...

CVE-2001-0784: Undefined Security Weakness

Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack using encoded URL characters...

CVE-1999-1297: Undefined Security Weakness

cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters such as those from password prompts via the L2/AGAIN key...

XTux Server 2001.0 6.01 - Garbage Denial of Service

source: https://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected characters. This causes the server to become unresponsive...

XTux Server 2001.0 6.01 - Garbage Denial of Service

XTux Server 2001.0 6.01 - Garbage Denial of Service source: https://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected...

CVE-2001-1070

Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters...

CVE-2001-1070

Sage Software MAS 200 is affected by CVE-2001-1070, where a remote attacker can trigger a denial-of-service by connecting to port 10000 and sending a sequence of control characters. The vulnerability is described as impacting availability (partial impact) with no confidentiality or integrity impa...

Вставка символов в шифрованные каналы psyBNC (protection bypass)

Зашифрованными считаются все строки начинающиеся с B...

CVE-2001-1556

The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep...

Выполнение команд в exim (code execution)

При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...

Выполнение команд через Viralator (shell characters)

При передаче URL внешней команде wget не комментируются некоторые shell-символы...

Шел-команды в Network Query Tool (code execution)

Нефильтруемые шел-символы при вызове внешней программы...

RSA Security ACE/Agent for Windows, ACE/Agent for Windows NT, and ACE/Agent for Windows 2000 do not properly handle null characters in URL

Overview RSA Security ACE/Agent for Windows, ACE/Agent for Windows NT, and ACE/Agent for Windows 2000 contain a vulnerability in which the ACE/Agent does not properly handle null characters contained in a URL. A specially crafted request may cause ACE/Agent to enter a debugging mode, possibly...

CVE-2001-0729: Undefined Security Weakness

Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / slash characters...

Шел-символы в W3Mail (shell characters)

При вызове внешнего приложения не проверяются шел-символы в воде пользователя...

CVE-2001-1070

Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters...

CVE-2001-0965

glFTPD 1.23 allows remote attackers to cause a denial of service CPU consumption via a LIST command with an argument that contains a large number of asterisk characters...