6474 matches found
ASP database plug horse small conference-vulnerability warning-the black bar safety net
With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now, let us to solve this problem...
FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)
The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...
Command injection
acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...
CVE-2006-2242
acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...
CVE-2006-2254
Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service application crash via a username with a large number of newline characters...
Buffer overflow
Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service application crash via a username with a large number of newline characters...
CVE-2006-2242
acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...
Buffer overflow
Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service daemon crash via a request for a URI composed of several "" backslash characters...
CVE-2006-2222
CVE-2006-2222 describes a buffer overflow in zawhttpd (v0.8.23 and possibly earlier) that allows remote attackers to cause a denial of service (daemon crash) by crafting a request URI containing multiple backslash characters. The affected component is zawhttpd, and the root cause is a buffer over...
Ubuntu 4.10 / 5.04 / 5.10 : mysql-dfsg vulnerability (USN-274-1)
A logging bypass was discovered in the MySQL query parser. A local attacker could exploit this by inserting NUL characters into query strings even into comments, which would cause the query to be logged incompletely. This only affects you if you enabled the 'log' parameter in the MySQL...
USN-274-1: MySQL vulnerability
A logging bypass was discovered in the MySQL query parser. A local attacker could exploit this by inserting NUL characters into query strings even into comments, which would cause the query to be logged incompletely. This only affects you if you enabled the 'log' parameter in the MySQL...
CVE-2006-2043
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "" backtick characters in the appliance's command line interface CLI...
CVE-2006-2061
SQL injection vulnerability in lib/functaskmanager.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters...
CVE-2006-2056
CVE-2006-2056 affects Internet Explorer 6 on Windows XP SP2. The vuln is an argument-injection flaw where an attacker can influence command line arguments passed to a launched mail client via double-quote characters in a mailto: handler, demonstrated by starting Outlook with an arbitrary attachme...
OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit
Exploit for hardware platform in category dos / poc ============================================================ OCE 3121/3122 Printer parser.exe Denial of Service Exploit ============================================================ !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit...
OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit
No description provided by source. !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being...
Multiple IP3 Networks NetAccess security vulnerabilities
SQL injections, unfiltered shell characters, etc...
Novell Messenger Server 2.0 - 'Accept-Language' Remote Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
[SECURITY] [DSA 1033-1] New horde3 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1033-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 12th, 2006 http://www.debian.org/security/faq -...
Microsoft Internet Explorer fails to properly handle double-byte characters in specially crafted URLs
Overview Microsoft Internet Explorer IE fails to properly handle double-byte characters in URLs, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description IE fails to properly handle double-byte characters in URLs. When a specially crafted HTML file is opened in IE...