Multiple browsers security dialogs race conditions

By forcing user to type predictable characters, key sequences or mouse clicks it's possible to conduct situation user event will be received by shortly appeared security dialog for example "Save file" dialog can apper then user is about to press Y key...

RHEL 2.1 : unzip (RHSA-2003:200)

Updated unzip packages resolving a vulnerability allowing arbitrary files to be overwritten are now available. Updated 15 August 2003 Ben Laurie found that the original patch to fix this issue missed a case where the path component included a quoted slash. These updated packages contain a new pat...

ISC DHCP contains a stack buffer overflow vulnerability in handling log lines containing ASCII characters only

Overview The Internet Systems Consortium's ISC Dynamic Host Configuration Protocol DHCP 3 application contains a buffer overflow vulnerability. Exploitation of this vulnerability can cause a denial of service condition to the DHCP Daemon DHCPD and may permit a remote attacker to execute arbitrary...

CVE-2004-0550: Undefined Security Weakness

Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." period characters...

log2mail unfiltered shell characters

No description provided...

CVE-2004-0476

CVE-2004-0476 affects 3Com OfficeConnect Remote 812 ADSL Router (firmware 1.1.9.4). A buffer overflow in the Telnet port handling allows remote attackers to cause a denial of service (reboot or packet loss) by sending a long string containing Telnet escape characters. Exploitation details and spe...

CVE-2004-0476: Undefined Security Weakness

Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service reboot or packet loss via a long string containing Telnet escape characters to the Telnet port...

CVE-2004-0478

The CVE-2004-0478 entry describes a DoS flaw in Mozilla where JavaScript can trigger an infinite loop that appends input to a form (potentially via control characters such as an embedded ctrl-U), causing high CPU/RAM usage. Affected versions are not precisely specified; the impact is denial of se...

lha -- numerous vulnerabilities when extracting archives

Source code reviews of lha by Lukasz Wojtow, Thomas Biege, and others uncovered a number of vulnerabilities affecting lha: Buffer overflows when handling archives and filenames. CVE-2004-0694 Possible command execution via shell meta-characters when built with NOMKDIR. CVE-2004-0745 Buffer overfl...

ZoneAlarm e-mail protection bypass

File is not checked if filename contains extended characters...

Kerio Personal Firewall DoS

Special characters in URL cause service to crash...

Character not allowed in user name

A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...

Character not allowed in user name

A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...

squid URL ACL protection bypass

By escaping URL characters it's possible to bypass URL filtering...

clamav shell characters

Shell characters problem in filename if f option is used...

CVE-2004-0284

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

CVE-2004-0284: Undefined Security Weakness

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service CPU consumption, if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters %00 after the host name...

Microsoft Outlook shell characters problem

Shell characters problem allow javacript execution in local zone...

Norton Antivirus protection bypass

Files with special characters in path are not checked...

NAV bugs!

Subject: NAV bugs! Published: Friday, 05 March, 2004 Updated: 06-Mar-04 Discovered By: Bipin Gautam hUNT3R Product Version: Norton Antivirus 2002 ver: 8.00.58 Only tested On... Risk Impact: Low-Medium Details: During a 'manual scan' of a folder, if Norton Antivirus NAV encounters a file /folder...