CGI bugs

No description provided...

CGI bugs

No description provided...

IBM DB2 - Shared Library Injection

IBM DB2 - Shared Library Injection source: https://www.securityfocus.com/bid/8346/info IBM DB2 ships with a number of shared libraries, stored in a directory owned by the user and group 'bin'. As setuid root utilities are linked to these libraries, their ownership by a user and group of a lower...

UMN gopherd[2.x.x/3.x.x]: ftp gateway, and GSisText() buffer overflow exploits.

bordom/fun audit time... been awhile since i did an audit of UMNUniversity of Minnesota gopherd+ daemon. figured i would check out the newer v3.0.x series, which has cleaned up the past security issues... while the old issues are resolved, still a few leftovers. two exploits follow... original...

[SECURITY] [DSA-336-1] New Linux 2.2.20 packages and i386 kernel images fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 336-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 29th, 2003 http://www.debian.org/security/faq -...

security flaw

Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerabilit...

Hosting Controller Multiple Script Arbitrary Directory Browsing

The Hosting Controller application resides on this server. This version is vulnerable to multiple remote exploits. At attacker may make use of this vulnerability and use it to gain access to confidential data and/or escalate their privileges on the Web server. %NASLMINLEVEL 70300 This script was...

[EXPL] Exploit Code Released for errpt

Return-Path: [email protected] Received: from adm.sci-nnov.ru adm.sci-nnov.ru 195.122.226.2 by pent.sci-nnov.ru 8.12.8p1/8.12.8 with ESMTP id h5BLXUjP039124 for [email protected]; Thu, 12 Jun 2003 01:33:30 +0400 MSD envelope-from [email protected]...

Avirt Multiple Product HTTP Proxy Overflow (deprecated)

This plugin has been deprecated as it resulted in false positives without reliably detecting the vulnerability on the intended target. Avirt software is not currently being distributed or maintained. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/03/30. include"compat.inc";...

[LSD] HP-UX security vulnerabilities

Hello, In this letter you will find the result of a brief security audit that we did some time ago for HP-UX platform. We have found 8 vulnerabilities seven local and a remote one. Technical details about all of the vulnerabilities were sent to the HP security team few months ago and in all cases...

CVE-2002-1462

details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields...

ImageFolio 2.2x/3.0/3.1 - 'Admin.cgi' Directory Traversal

source: https://www.securityfocus.com/bid/7828/info ImageFolio 'admin.cgi' has been reported prone to a directory traversal vulnerability. By supplying directory traversal sequences, as a URI parameter, to the 'admin.cgi' script an attacker may break out of the web root directory. Successful...

Man 1.5.1 - Catalog File Format String

Man 1.5.1 - Catalog File Format String // source: https://www.securityfocus.com/bid/7812/info A vulnerability has been reported in the man utility. The problem is said to occur due to a format string bug when handling a catalog file. As a result, an attacker may be capable of writing arbitrary...

WebChat 2.0 - users.php Cross-Site Scripting

WebChat 2.0 - users.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7779/info WebChat has been reported prone to a cross-site scripting vulnerability. WebChat does not adequately filter script code from URI parameters, making it prone to cross-site scripting attacks...

CGI bugs

No description provided...

M-TECH P-Synch 6.2.5 - nph-psf.exe?css Cross-Site Scripting

M-TECH P-Synch 6.2.5 - nph-psf.exe?css Cross-Site Scripting source: https://www.securityfocus.com/bid/7745/info P-Synch does not adequately filter HTML code from URL parameters, making it prone to cross-site scripting attacks. Code will be executed in the security context of the system running...

PHP-Nuke Denial of Service attack and more SQL Injections

------- Product: PHP-Nuke Vendor: Francisco Burzi Versions Vulnerable: Francisco Burzi PHP-Nuke 6.0 Francisco Burzi PHP-Nuke 6.5 RC3 Francisco Burzi PHP-Nuke 6.5 RC2 Francisco Burzi PHP-Nuke 6.5 RC1 Francisco Burzi PHP-Nuke 6.5 FINAL Francisco Burzi PHP-Nuke 6.5 BETA 1 Francisco Burzi PHP-Nuke 6....

Bugzilla < 2.16.3 / 2.17.4 Multiple Vulnerabilities (XSS, Symlink)

The remote Bugzilla bug tracking system, according to its version number, contains various flaws that may let an attacker perform cross- site scripting attacks or even delete local files provided he has an account on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date:...

HP Instant TopTools hpnst.exe CGI DoS

The remote host has the CGI 'hpnst.exe' installed. Older versions of this CGI pre 5.55 are vulnerable to a denial of service attack where the user can make the CGI request itself. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-2002-0805

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, 1 creates new directories with world-writable permissions, and 2 creates the params file with world-writable permissions, which allows local users to modify the files and execute code...