9325 matches found
IIS FrontPage DoS II
Microsoft IIS, running Frontpage extensions, is vulnerable to a remote buffer overflow attack. An attacker, exploiting this bug, may gain access to confidential data, critical business processes, and elevated privileges on the attached network. OpenVAS Vulnerability Test $Id: frontpageoverflow.na...
Apache <= 1.3.33 htpasswd local overflow
The remote host appears to be running Apache 1.3.33 or older. There is a local buffer overflow in the 'htpasswd' command in these versions that may allow a local user to gain elevated privileges if 'htpasswd' is run setuid or a remote user to run arbitrary commands remotely if the script is...
IgnitionServer IIRC Operator Privilege Escalation Vulnerability
IgnitionServer IRC service may be vulnerable to a flaw that let an remote attacker to gain elevated privileges on the system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVSTrac CVSROOT/passwd arbitrary account deletion
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of CVSTRAC is vulnerable to a flaw wherein a remote attacker can overwrite a critical file, thereby giving them elevated access and potentially control over other user accounts...
WS_FTP Server Multiple Vulnerabilities (Nov 2005)
WSFTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:wsftpserver";...
Microsoft SQL Server SQL Abuse Vulnerability (Q256052)
The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Windows Debugger flaw can Lead to Elevated Privileges (Q320206)
Authentication Flaw in Windows Debugger can Lead to Elevated Privileges Q320206 SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Oracle Enterprise Manager Oracle Agent contains a buffer overflow
Overview Oracle Enterprise Manager Oracle Agent contains a buffer overflow vulnerability. Exploitation may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. Description The Oracle Agent provides remote management services for Oracle Enterprise...
[Full-disclosure] iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability
Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.13.05 www.idefense.com/application/poi/display?id=321&type=vulnerabilities October 13, 2005 I. BACKGROUND XMail is an Internet and intranet mail server. XMail sources compile under GNU/Linux,...
Microsoft Windows Client Service For Netware Buffer Overflow Vulnerability
Description Microsoft Client Service for Netware is prone to a buffer overflow vulnerability that could permit the execution of arbitrary remote code. A remote attacker can exploit this vulnerability to execute arbitrary code and completely compromise the computer. This issue could also be...
The use of MS vulnerabilities and then talk about elevated permissions WEBSHELL-a vulnerability warning-the black bar safety net
PS:long time no write articles, and today idle all right it's not alright, I'm more depressed, quickly test CET4, but the in the mind have no bottom, and casually throw a garbage article out, hoping to be helpful to everyone. Today I want to bring to everyone is that when we get the WEBSHELL afte...
Fedora Core 3 : xorg-x11-6.8.2-1.FC3.45 (2005-893)
Updated xorg-x11 packages that fix several integer overflows, various bugs, are now available for Fedora Core 3. X.Org X11 is an implementation of the X Window System, which provides the core functionality for the Linux graphical desktop. Several integer overflow bugs were found in the way X.Org...
XFree86 security update
CentOS Errata and Security Advisory CESA-2005:501 Updated XFree86 packages that fix several integer overflows, various bugs, and add ATI RN50/ES1000 support are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security...
XFree86 security update
CentOS Errata and Security Advisory CESA-2005:329-01 Updated XFree86 packages that fix several integer overflows are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an open source...
GLSA-200509-07 : X.Org: Heap overflow in pixmap allocation
The remote host is affected by the vulnerability described in GLSA-200509-07 X.Org: Heap overflow in pixmap allocation X.Org is missing an integer overflow check during pixmap memory allocation. Impact : An X.Org user could exploit this issue to make the X server execute arbitrary code with...
X11 server -- pixmap allocation vulnerability
Allocating large pixmaps by a client can trigger an integer overflow in the X server, potentially leading to execution of arbitrary code with elevated root privileges...
X.Org: Heap overflow in pixmap allocation
Background X.Org is X.Org Foundation's Public Implementation of the X Window System. Description X.Org is missing an integer overflow check during pixmap memory allocation. Impact An X.Org user could exploit this issue to make the X server execute arbitrary code with elevated privileges. Workarou...
pam_ldap: Authentication bypass vulnerability
Background pamldap is a Pluggable Authentication Module which allows authentication against LDAP directories. Description When a pamldap client attempts to authenticate against an LDAP server that omits the optional error value from the PasswordPolicyResponseValue, the authentication attempt will...
32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities
Title: 32919 - Computer Associates Message Queuing CAM/CAFT multiple vulnerabilities CA Vulnerability ID: CAID 32919 Disclosure Date: 2005-08-19 Discovered By: CA internal audit Impact: Remote attackers can execute arbitrary code, or cause a denial of service condition. Summary: During a recent...
Computer Associates Message Queuing software vulnerable to buffer overflows
Overview Computer Associates Message Queuing software contains buffer overflow conditions, which may allow a remote attacker to execute arbitrary code with elevated privileges. Description Computer Associates Message Queuing CAM / CAFT is a software component that provides messaging services. CAM...