6933 matches found
Squid Proxy 2.42.5 - NULL URL Character Unauthorized Access
Squid Proxy 2.42.5 - NULL URL Character Unauthorized Access source: https://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to...
Confirm shell character problem
shell characters problem on e-mail address parsing...
SquirrelMail shell characters command execution
Uncommented shell characters in parsing To: headers in PGP plugin...
Microsoft Internet Explorer does not properly display URLs
Overview Microsoft Internet Explorer does not properly display the location of HTML documents. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the address bar. Users expe...
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Westpoint Security Advisory Title: VisitorBook LE Mail Relay and Cross Site Scripting Risk Rating: Moderate Software: FreeScripts VisitorBook LE Platforms: Most Unix Vendor URL: http://www.freescripts.com/ Author: Paul Johnston [email protected] Date: 10th December 2003 Advisory ID: wp-03-000...
CVE-2003-0870
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name...
Microsoft Word Macro Buffer Overflow
Topic: Buffer overflow on Macro structure processing Vulnerable: Microsoft Office 97, Microsoft Office 2000 any service pack Not Vulnerable: Microsoft Office XP Description: During processing of document with embedded macros Microsoft Office family products are vulnerable to buffer overflow...
CVE-2003-0831: Improper Restriction of Operations within the Bounds of a Memory Buffer
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files...
CVE-2003-0770
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement...
KisMAC multiple bugs
Ownership changing, symlink problem, uncommented shell-characters...
wu-ftpd shell characters problem
During tar execution for archived files receiving '-' sign is not commented...
ISS Server Sensor Denial of Service
EnterEdge has discovered a Denial of Service condition in ISS RealSecure Server Sensor 7.0. The condition is present when running ISS's RealSecure Server Sensor 7.0 on a Microsoft IIS server with SSL. By passing invalid unicode characters via ssl, the server sensor will shut down the IIS service...
widz uncommented shell characters
Uncommented shellc characters on system call...
CVE-2003-0516
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...
CVE-2003-0460: Undefined Security Weakness
The rotatelogs program on Apache before 1.3.28, for Windows and OS/2 systems, does not properly ignore certain control characters that are received over the pipe, which could allow remote attackers to cause a denial of service...
CVE-2003-0516
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...
CVE-2003-0516
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...
Moderate: Red Hat Security Advisory: unzip security update
Updated unzip packages resolving a vulnerability allowing arbitrary files to be overwritten are now available. Updated 15 August 2003 Ben Laurie found that the original patch to fix this issue missed a case where the path component included a quoted slash. These updated packages contain a new pat...