460 matches found
CVE-2007-1700
CVE-2007-1700 describes a vulnerability in PHP where the session extension pre-4.4.5 (and pre-5.2.1) incorrectly calculates the session variable reference count, failing to account for the internal pointer in the session globals. This can allow context-dependent attackers to execute arbitrary cod...
CVE-2007-0455
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...
Buffer overflow
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...
CVE-2007-0455
CVE-2007-0455 is a buffer over-read in libgd2/libgd (GD Graphics Library) prior to 2.0.34 that affects the gdImageStringFTEx path in gdft.c. A crafted string using a JIS-encoded font could crash the PHP interpreter or, in some contexts, allow arbitrary code execution on the remote host. Public re...
CVE-2007-0455
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...
CVE-2006-3647
Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than...
CVE-2006-4693
Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651...
Juniper NetScreen Security Manager (NSM) guiSrv/devSrv Crafted String Remote DoS
The version of Juniper NetScreen-Security Manager NSM installed on the remote host may allow an attacker to deny service to legitimate users using specially crafted long strings to the guiSrv and devSrv processes. A watchdog service included in Juniper NSM, though, automatically restarts the...
Hasbani-WindWeb2.0 - GET Remote Denial of Service
Hasbani-WindWeb2.0 - GET Remote Denial of Service / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 26\09\05 / || / / i Title: Hasbani-WindWeb/2.0 - HTTP GET Remote DoS i Discovered by: Expanders i Exploit by: Expanders What is Hasbani-WindWeb/2.0 Hasbani server is a httpd created for...
CVE-2005-2961
Buffer overflow in the getstringahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an tag...
[SA15535] Ettercap "curses_msg()" Format String Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-1603
NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service crash via a crafted string to TCP port 7080...
CVE-2005-1603
CVE-2005-1603 affects NiteEnterprises Remote File Manager 1.0. The vulnerability allows an attacker to trigger a denial-of-service (crash) by sending a crafted string to TCP port 7080. No exploit details or in-the-wild context are provided in the available documents. The sources list the impact a...
[Full-Disclosure] [Advisory + Exploit] NetNote Server 2.2, Remote Crafted String Vulnerability
/ NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage - http://www.alshare.com/ NetNote is the...
NetNote Server (<= 2.2 build 230) Crafted String DoS Exploit
Exploit for unknown platform in category dos / poc ============================================================ NetNote Server = 2.2 build 230 Crafted String DoS Exploit ============================================================ / NetNote Server v2.2 build 230, crafted string vulnerability. Poc...
NetNote Server 2.2 build 230 - Crafted String Denial of Service
NetNote Server 2.2 build 230 - Crafted String Denial of Service / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE...
NetNote Server (<= 2.2 build 230) Crafted String DoS Exploit
No description provided by source. / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage -...
IRIX 5.x/6.x - MediaMail HOME Environment Variable Buffer Overflow
source: https://www.securityfocus.com/bid/7672/info A buffer overflow vulnerability has been reported for the MediaMail binary that may result in a user obtaining elevated privileges. Although unconfirmed, an attacker, using a custom crafted string, could overwrite stack memory, including the...
CHETCPASSWD 1.12 - Shadow File Disclosure
source: https://www.securityfocus.com/bid/6472/info CHETCPASSWD is prone to a vulnerability that may potentially cause the tail end of the local shadow file to be disclosed to a remote attacker. It is possible to exploit this issue by sending an overly long string as a value for the 'user' URI...
BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/7025/info It has been reported that a vulnerability in the handling of some types of requests exists in lprm. When an attacker sends a maliciously crafted string to a configured printer through the lprm command, it may be possible to execute code. /...