CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

SGI IRIX runpriv utility unfiltered shell characters vulnerability

Unfiltered shell characters allow to execute any command...

CVE-2005-3172

The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow...

CVE-2005-3172

CVE-2005-3172 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4, where WideCharToMultiByte can mis-handle Japanese composite characters in the last position, potentially preventing null termination and leading to data corruption or a buffer overflow. The issue is rooted in the strin...

CVE-2005-3172

The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow...

Vulnerability in Scan Engine Software

//-------------------------------------- // Vulnerability in Scan Engine Software // Release Date : 2005-09-15 // Version: Currents may be all priors versions // Tested on: Windows 2000 SP2 & SP4 // Tested on: Windows 2000 Server SP4 // // Discovered by: fRoGGz, maew, shadok & mogwai // Credit to...

security flaw

wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code...

Nokia smartphones Nobex service DoS

Server stops responding after receiving archive with special characters in the filename...

Mozilla / Netscape / Firefox browsers buffer overflow

Buffer oveflow on "zero-width non-joiner" sequence of Arabic Unicode characters...

wzdftpd unfiltered shell characters problem

popen unfiltered characters on SITE EXEC command...

DEBIAN-CVE-2005-2769

Cross-site scripting XSS vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain "" or other special characters, which is not properly sanitized by SqWebMail...

[SECURITY] [DSA 788-1] New kismet packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 788-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2626

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...

CVE-2005-2626

Removed by vendor...

CVE-2005-2626

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...

CVE-2005-2626

Kismet (before 2005-08-R1) is affected by CVE-2005-2626 and CVE-2005-2627 for insecure handling of unprintable SSID characters and multiple integer underflows that could allow remote code execution. Public advisories (Debian DSA-788-1, GLSA 200508-10, Debian DSAs) document remote exploitation vec...

CVE-2005-2626

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...

CVE-2005-2607

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null "%00" characters...

jawsGlossary.txt

XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...