5060 matches found
Directory traversal
Directory traversal vulnerability in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. dot dot in the recipient field...
pigyard art Gallery - Multiple Vulnerabilities
Pigyard Art Gallery Multiple Remote Vulnerabilities Script Buy Now : http://www.pigyardgallery.com/howtobuy.php author: ZoRLu home: www.yildirimordulari.org contact: [email protected] not: msn i ekleyipte aptal aptal konusmayýn yok ben seni eklemedim sen beni ekledin vs. sorularýnýz varsa...
CVE-2007-6286
Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to...
Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1
Luigi Auriemma Application: Ipswitch Instant Messaging http://www.ipswitch.com/products/instantmessaging Versions: = 2.0.8.1 Platforms: Windows Bugs: A pre-auth NULL pointer crash in decryption function B format string in logging C arbitrary empty files creation Exploitation: remote A versus both...
DEBIAN-CVE-2008-0195
WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages...
Perforce revision control system DoS
HTTP request with empty boy and non-zero Content-Length causes CPU exhaustion...
SuSE 10 Security Update : avahi (ZYPP Patch Number 3845)
Local attackers could send empty TXT data via D-BUS, causing the avahi daemon to exit. CVE-2007-3372 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
SuSE 10 Security Update : net-snmp (ZYPP Patch Number 4755)
This update of net-snmp fixes the following bug : - default and configurable maximum number of varbinds returnable to a GETBULK request. CVE-2007-5846 - crash when smux peers were configured with empty passwords %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...
CVE-2002-2325
The c-client library in Internet Message Access Protocol IMAP dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service client crash via a MIME-encoded email with Content-Type header containing an empty boundary field...
MLDonkey backdoor access
'p2p' account with empty password and valid shell is created during installation...
[ GLSA 200710-25 ] MLDonkey: Privilege escalation
Gentoo Linux Security Advisory GLSA 200710-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2002-2286
Technical details for CVE-2002-2286 are not publicly provided in the supplied documents. No affected product/version or root cause is specified beyond the general description. Monitor for updates.
Mandrake Linux Security Advisory : avahi (MDKSA-2007:185)
The Avahi daemon in 0.6.20 and previous allows attackers to cause a denial of service via empty TXT data over D-Bus, which triggers an assert error. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
Design/Logic Flaw
The SOCKS4 Proxy in Microsoft Internet Security and Acceleration ISA Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information the destination IP address of another user's session via an empty packet...
Thomson ST 2030 SIP phone DoS
Crash on invalid INVITE request Via: and To: headers and also on empty message...
CVE-2007-3529
CVE-2007-3529 affects videos.php in PHPDirector 0.21 and earlier. The vulnerability allows remote attackers to obtain sensitive information by sending an empty value for the id[] parameter, which triggers an error message that reveals the path. Affected software is PHPDirector (videos.php) with v...
httpd mod_cache segfault
cacheutil.c in the modcache module in Apache HTTP Server httpd, when caching is enabled and a threaded Multi-Processing Module MPM is used, allows remote attackers to cause a denial of service child processing handler crash via a request with the 1 s-maxage, 2 max-age, 3 min-fresh, or 4 max-stale...
krb5 RPC library unitialized pointer free
The gssrpcsvcauthgssapi function in the RPC library in MIT Kerberos 5 krb5 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup...