6933 matches found
Privelege escalation via cron in OpenBSD
During mail'ing of job results shell characters are not properly escaped for mail command...
Command execution in XChat
During call to external program DNS name of remote host is used withot stripping of shell characters...
CVE-2002-0122
Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service crash via an SMS message containing unusual characters...
Bypassing libsafe format string protection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: libsafe Version: up to 2.0-11 URL: http://www.research.avayalabs.com/project/libsafe/ Author: Wojciech Purczyсski [email protected] Date: March 14, 2002 Issue: ====== Libsafe provides ineffective protection against format string exploit attacks that...
CVE-2001-1218
Microsoft Internet Explorer for Unix 5.0SP1 is affected. Local users can cause a denial of service (crash) in the CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window. The CVSS data indicates a Low base score (2.1) with LOCAL access, no confidentiali...
CVE-2002-0122
CVE-2002-0122 affects Siemens 3568i WAP mobile phones. The vulnerability enables a remote denial-of-service (crash) when an SMS containing unusual characters is received. The Connected documents provide the affected product and impact but do not specify exploit status or a concrete remediation. N...
CVE-2002-0122
Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service crash via an SMS message containing unusual characters...
CVE-2002-0102: Undefined Security Weakness
Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via 1 a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and 2 a request to TCP port 4000 with a large number of "." characters...
CVE-1999-1297
Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...
CVE-2001-0784: Undefined Security Weakness
Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack using encoded URL characters...
CVE-1999-1297: Undefined Security Weakness
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters such as those from password prompts via the L2/AGAIN key...
XTux Server 2001.0 6.01 - Garbage Denial of Service
XTux Server 2001.0 6.01 - Garbage Denial of Service source: https://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected...
XTux Server 2001.0 6.01 - Garbage Denial of Service
source: https://www.securityfocus.com/bid/4260/info XTux is a multiplayer network game for Linux. The server component June 01, 2001 version is vulnerable to a denial of service initiated by connecting to the server and sending unexpected characters. This causes the server to become unresponsive...
CVE-2001-1070
Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters...
CVE-2001-1070
Sage Software MAS 200 is affected by CVE-2001-1070, where a remote attacker can trigger a denial-of-service by connecting to port 10000 and sending a sequence of control characters. The vulnerability is described as impacting availability (partial impact) with no confidentiality or integrity impa...
Вставка символов в шифрованные каналы psyBNC (protection bypass)
Зашифрованными считаются все строки начинающиеся с B...
CVE-2001-1556
The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep...
Выполнение команд в exim (code execution)
При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...