9911 matches found
DEBIAN-CVE-2005-0544
phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to 1 sqlvalidator.lib.php, 2 sqlparser.lib.php, 3 selecttheme.lib.php, 4 selectlang.lib.php, 5 relationcleanup.lib.php, 6 headermetastyle.inc.php, 7 getforeign.lib.php, 8 displaytbllinks.lib.php, 9...
Cyrus IMSPd multiple vulnerabilities
The Cyrus team reported multiple vulnerabilities in older versions of Cyrus IMSPd: These releases correct a recently discovered buffer overflow vulnerability, as well as clean up a significant amount of buffer handling throughout the code...
Security fix for the ALT Linux 6 package lha version 2:1.14i-alt1
May 8, 2004 Michael Shigorin 2:1.14i-alt1 - security fixes for CAN-2004-0234, CAN-2004-0235 patch taken from RH - symlink patch from the same source - spec cleanup little modification by inger...
CVE-2003-0646
CVE-2003-0646 affects Trend Micro HouseCall (ActiveX controls) versions 5.5 and 5.7 and Trend Micro Damage Cleanup Server 1.0. The root cause is multiple buffer overflows in the ActiveX controls triggered by long parameter strings, enabling remote code execution. Affected software exposes vulnera...
Syscall implementation could lead to whether or not a file exists
include stdlib.h include unistd.h include stdio.h include sys/types.h include fcntl.h ifndef ONOFOLLOW define ONOFOLLOW 0400000 / don't follow links / endif ifndef OLARGEFILE define OLARGEFILE 0100000 endif int flags = ORDONLY|OEXCL|OSYNC|ONOCTTY|ONOFOLLOW; / taken from scuts format string...
FreeBSD rc script file deletion
No symbolic links check on /tmp cleanup...
Immunity Canvas: CACHEFSD_LPD
Name| cachefsdlpd ---|--- CVE| CVE-2002-0084 Exploit Pack| CANVAS Description| cachefsd .cfsmnt File Stack Overflow Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 CVE Name: CVE-2002-0084 VENDOR: Sun Development Notes: This vulnerability had been marked only as ...
Two Problems in IMP 2
Crimelabs, Inc. www.crimelabs.com Security Advisory Crimelabs Security Advisory CLABS200003 Title: IMP/MSWordView /tmp Problems Date: 22 April, 2000 Application: IMP with MSWordView Platform: Any supported by IMP, MSWordView Severity: Moderate -- anyone can view Word document attachments processe...
DeepThroat Backdoor Detection
DeepThroat is installed on the remote host. This backdoor allows anyone to perform actions such as reading files, reading the registry and executing programs. A remote attacker could use this to completely control the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...