CVE-2002-0819

Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the artsfatal function...

Image Display System 0.8.1 - Directory Existence Disclosure

source: https://www.securityfocus.com/bid/4870/info IDS Image Display System is an web based photo album application written in Perl. IDS is freely available and is maintained by Ashley M. Kirchner. Users can confirm the existence and location of various directories residing on the IDS host. This...

IIS allows universal CrossSiteScripting

Thor Larholm security advisory TL001 ------------------------------------- By Thor Larholm, Denmark. 10 April 2002 HTML format: http://jscript.dk/adv/TL001/ Topic: IIS allows universal CrossSiteScripting. Discovery date: 13 March 2002. Severity: Medium Affected applications: ---------------------...

Linux kernel d_path problems

On long path a part of path is returned instead of error code...

BIND memcpy not bounded in case T_SIG of rrextract()

Overview Version 8.2.2 of BIND current circa November 1999 contained a buffer overflow in the routine that converts records from network format to database format. Description Version 8.2.2 of BIND includes some checks for the correct format of a signature record in DNSSEC that previous versions...

CVE-1999-1253

Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges...

Утечка информации в Webridge (information leak)

В случае ошибюки показываются все серверные переменные...

CVE-2001-0598

Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled...

CVE-2001-0598

Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled...

IMAP4rev1 12.261/12.264/2000.284 (lsub) Remote Exploit

Exploit for linux platform in category remote exploits ====================================================== IMAP4rev1 12.261/12.264/2000.284 lsub Remote Exploit ====================================================== / !!! Private !!! imapd IMAP4rev1 v12.261, v12.264 and 2000.284 Remote Exploit...

Remote Denial Of Service -- NetWare 5.0 with SP 5

Remote Denial Of Service -- NetWare 5.0 with SP 5 -------------------------------------------------------------- I encounter a buffer overflow bug in NetWare 5.0 with service pack 5. After few minutes after the attack server issue a memory allocation error. 10-07-2000 12:29:53 pm: SERVER-5.0-4631...

Локальный DoS через mmap в FreeBSD

Из-за некорректной обработки сбоев при отображении страниц памяти возможно завесить систему...

cern-pss.txt

$%$$%$$%$$%$$%$$%$$%$$%$$%$$%$ $% CERN 3.0A Heap overflow advisory %$ $%$$%$$%$$%$$%$$%$$%$$%$$%$$%$ $% By Scrippie %$ $ Phreak.nl $ $%$$%$$%$$%$$%$$%$$%$$%$$%$$%$$ $ Love To: Maja, Dopey, Hester $ $%$$%$$%$$%$$%$$%$$%$$%$$%$$%$$ there is a heap overflow that wastes memory space in the CERN/3.0A...

solarisab2.txt

Date: Sun, 23 Aug 1998 21:02:30 -0700 From: Marc Slemko Subject: Solaris ab2 web server is junk For anyone who didn't figure out in the first two seconds after installing Solaris that running Sun's well, ok, it is some third party server but Sun is licensing it answerbook web server is silly, now...