CVE-2005-1929

Trend Micro ServerProtect Management Console (versions 5.58 and earlier, used in Control Manager 2.5/3.0 and Damage Cleanup Server 1.1) is affected by heap-based buffer overflows in two ISAPI DLLs, isaNVWRequest.dll and relay.dll, triggered by processing large chunked POST requests with wrapped l...

CVE-2005-1929

Multiple heap-based buffer overflows in 1 isaNVWRequest.dll and 2 relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunk...

CVE-2005-1930

Directory traversal vulnerability in the Crystal Report component rptserver.asp in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...

ARPUS/Ce - Local File Overwrite (setuid)

/ Copyright Kevin Finisterre - ripped from my perlex.c DISCLAIMER I am in no way responsible for your stupidity. DISCLAIMER I am in no way liable for any damages caused by compilation and or execution of this code. WARNING DO NOT RUN THIS UNLESS YOU KNOW WHAT YOU ARE DOING WARNING overwriting...

Debian DSA-108-1 : wmtv - symlink vulnerability

Nicolas Boullis found some security problems in the wmtv package a dockable video4linux TV player for windowmaker which is distributed in Debian GNU/Linux 2.2. With the current version of wmtv, the configuration file is written back as the superuser, and without any further checks. A malicious us...

GLSA-200404-01 : Insecure sandbox temporary lockfile vulnerabilities in Portage

The remote host is affected by the vulnerability described in GLSA-200404-01 Insecure sandbox temporary lockfile vulnerabilities in Portage A flaw in Portage's sandbox wrapper has been found where the temporary lockfiles are subject to a hard-link attack which allows linkable files to be...

&RQ DoS bug

===RUS При длинном запросе на авторизацию старого образца &RQ любой версии выдает много ошибок, в некоторых случаях требуется переустановка клиента. После разговора с Rejetto, он прислал файл конфигурации, который закрывает эту брешь. icq 7000000 [email protected] с уважением, RdM-YanDeX ===ENG...

multiple vulnerabilities in phpBB

Users with admin rights can severly damage an phpBB installation, potentially triggered by viewing a page with a malicious link sent by an attacker...

Moderate: Red Hat Security Advisory: : Updated SANE packages fix remote vulnerabilities

Updated SANE packages that resolve a number of vulnerabilities with the saned daemon are now available. SANE is a package for using document scanners. Sane includes a daemon program called saned that enables a single machine connected to a scanner to be used remotely. This program contains severa...

CVE-2003-0646

CVE-2003-0646 affects Trend Micro HouseCall (ActiveX controls) versions 5.5 and 5.7 and Trend Micro Damage Cleanup Server 1.0. The root cause is multiple buffer overflows in the ActiveX controls triggered by long parameter strings, enabling remote code execution. Affected software exposes vulnera...

CVE-2003-0646: Undefined Security Weakness

Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings...

Trillian 0.74 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================== Trillian 0.74 Remote Denial of Service Exploit ============================================== / -------------------------------------------- :::::::::::::::::: trillian 0.7d patch...

[INetCop Security Advisory] Buffer Overflow vulnerability in HTTP Fetcher Library.

======================================== INetCop Security Advisory 2003-0x82-011 ======================================== Title: Buffer Overflow vulnerability in HTTP Fetcher Library. 0x01. Description HTTP Fetcher is a small library that downloads files via HTTP. More detailed information is...

sambar.remote.dos.txt

Remote attack on Sambar Server 4.3 Beta 2 It is possible to crash sambar server by causing buffer overflow. The attack isn't recorded at the logs. You can make the attack by connecting the remote server at port 80, by telnet or any other program you find. You can do it by connection to the remote...

CVE-1999-1429

CVE-1999-1429 affects the DIT TransferPro system, where the installer creates devices with world-readable and world-writable permissions. The vulnerable element is the ff device driver, and the described outcome is that local users could damage disks due to improper permissions. The provided mate...

CVE-1999-1429: Undefined Security Weakness

DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver...

Перезапись файлов Sambar Server (data corruption)

Обратный путь в директориях в счетчике страниц позволяет повредить любой файл...

Tektronix Phaser 740750850930 - Network Printer Administration Interface

Tektronix Phaser 740750850930 - Network Printer Administration Interface source: https://www.securityfocus.com/bid/2659/info A remote vulnerability exists in Tektronix Phaser network printers in the 7xx, 8xx, and 9xx series. An attacker with access to the printer's local network or, if no firewal...

Tektronix Phaser 740/750/850/930 - Network Printer Administration Interface

source: https://www.securityfocus.com/bid/2659/info A remote vulnerability exists in Tektronix Phaser network printers in the 7xx, 8xx, and 9xx series. An attacker with access to the printer's local network or, if no firewall is in place, any attacker can reach the printer's admin interface,...