1556 matches found
CVE-2004-1876
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...
CVE-2004-1077
CVE-2004-1077 affects Citrix Program Neighborhood Agent for Win32 (v8.00.24737 and earlier) and MetaFrame Presentation Server client for WinCE before 8.33. The root cause is a design/implementation flaw in the AppInStartmenu directive that lets a remote server supply a full UNC path, enabling arb...
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restri...
DEBIAN-CVE-2004-2154
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive...
DEBIAN-CVE-2004-0811
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration...
PT-2004-3237 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.0.47 and earlier Description: The issue allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. It is noted...
NASM 0.98.x - Error Preprocessor Directive Buffer Overflow
NASM 0.98.x - Error Preprocessor Directive Buffer Overflow source: https://www.securityfocus.com/bid/11991/info NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments...
NASM 0.98.x - Error Preprocessor Directive Buffer Overflow
source: https://www.securityfocus.com/bid/11991/info NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments. Since the source file may originate from an external or...
Debian DSA-020-1 : php4 - remote DOS and remote information leak
The Zend people have found a vulnerability in older versions of PHP4 the original advisory speaks of 4.0.4 while the bugs are present in 4.0.3 as well. It is possible to specify PHP directives on a per-directory basis which leads to a remote attacker crafting an HTTP request that would cause the...
CVE-2004-0811
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration...
Apache < 2.0.52-dev 'Satisfy' Directive Access Control Bypass
Binary data 2309.prm...
Apache <= 2.0.51 Satisfy Directive Access Control Bypass
The remote host is running Apache web server 2.0.51. It is reported that this version of Apache is vulnerable to an access control bypass attack. This issue occurs when using the 'Satisfy' directive. An attacker may gain unauthorized access to restricted resources if access control relies on this...
Apache Httpd < 2.0.52 : Basic authentication bypass
A flaw in Apache 2.0.51 only broke the merging of the Satisfy directive which could result in access being granted to resources despite any configured authentication...
Citadel/UX <= 6.23 Remote USER Directive Exploit (Private Version)
Exploit for linux platform in category remote exploits ================================================================== Citadel/UX include include include include include include include / Place here your own link which contains a backdoor blackhole.c which listens on port 12345 / define COMMAN...
Apache < 2.2.9 Multiple Vulnerabilities
Binary data 4579.prm...
CVE-2004-0684
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters...
CVE-2004-0684
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters...
FreeBSD : wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed (201)
The following package needs to be updated: wu-ftpd+ipv6 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3b7c7f6c710211d8873f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
BUG IN APACHE HTTPD SERVER (current version 2.0.47)
APACHE HTTPD SERVER current version 2.0.47: How to return files in a Apache Deny All directory. The Directives controlling host access may be bypassed even if they have not permission to be override. 11 Jan 2004 DESCRIPTION Apache Web Server allows manage configurations via the main httpd.conf...
apache2047.txt
APACHE HTTPD SERVER current version 2.0.47: How to return files in a Apache Deny All directory. The Directives controlling host access may be bypassed even if they have not permission to be override. 11 Jan 2004 DESCRIPTION Apache Web Server allows manage configurations via the main httpd.conf...