CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

Konversation KDE IRC client multiple vulnerabilities

Special characters filtering problem...

Squirrelmail vacation plugin shell characters problem

Unfiltered shell characters on ftpfile external program invocation...

KDE FTP KIOslave: Command injection

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. KDE provided KIOslaves for many protocols in the kdelibs package, one of them being FTP. These are used by KDE applications such as Konqueror. Description The FTP KIOslave fails to properly...

Multiple JunkieFTP bugs

Shell characters problem. directory traversal...

greed -- insecure GRX file processing

A buffer overflow vulnerability has been detected in the greed URL handling code. This bug can especially be a problem when greed is used to process GRX GetRight files that originate from untrusted sources. The bug finder, Manigandan Radhakrishnan, gave the following description: Here are the bug...

CVE-2004-0284

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

TC-IDE unfiltered shell characters problem

Shell characters filtering problem on external program execution in multiple utilities...

CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

CVE-2004-0930

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

CVE-2004-0930: Undefined Security Weakness

The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...

Microsoft Internet Explorer Double Byte Character Set Handling Address Bar Spoofing Vulnerability

Description It is reported that Microsoft Internet Explorer is prone to a vulnerability that may allow a malicious Web page to spoof the address bar of the browser. This vulnerability presents itself due to a malfunction that occurs when certain double byte characters are encountered. As a result...

Flash Messaging DoS

Problem with handling some Unicode characters...

MaxDB DoS

Invalid non-ASCII characters handling in IsAscii7 function...

CVE-2004-1698

The Base64 function in PopMessenger 1.60 before 20 Sep 2004 and earlier allows remote attackers to cause a denial of service application crash via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash...

Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow

source: https://www.securityfocus.com/bid/11169/info Mozilla is prone to a remotely exploitable heap overflow that is exposed when the browser handles non-ASCII characters in URIs. This issue could be exploited by enticing a user to open a hyperlink that references a malicious URI. Successful...

LHa: Multiple vulnerabilities

Background LHa is a console-based program for packing and unpacking LHarc archives. Description The command line argument as well as the archive parsing code of LHa lack sufficient bounds checking. Furthermore, a shell meta character command execution vulnerability exists in LHa, since it does no...

rkdetect updated

Добавлена поддержка национальных символов в именах служб и вывод полной информации о подозрительной службе. Regards, Sergey V. Gordeychik, MCSE since NT 4.0, MCSA, MCT. Авторизованный курс компании Microsoft по обеспечению безопасности корпоративной сети "Основы сетевой безопасности" в Учебном...

Important: Red Hat Security Advisory: lha security update

An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...

CVE-2002-1186

Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters...