207 matches found
FreeBSD : trac -- reStructuredText breach of privacy and denial of service vulnerability (b0d61f73-0e11-11db-a47b-000c2957fdf1)
The Trac 0.9.6 Release Notes reports : Fixed reStructuredText breach of privacy and denial of service vulnerability found by Felix Wiemann. The discovered vulnerability requires docutils to be installed and enabled. Systems that do not have docutils installed or enabled are not vulnerable. As of...
trac -- reStructuredText breach of privacy and denial of service vulnerability
The Trac 0.9.6 Release Notes reports: Fixed reStructuredText breach of privacy and denial of service vulnerability found by Felix Wiemann. The discovered vulnerability requires docutils to be installed and enabled. Systems that do not have docutils installed or enabled are not vulnerable. As of...
Cyrus IMSPD 1.7 - 'abook_dbname' Remote Code Execution
/ Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner Exploit coded by: SpikE Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To cause the overrun, we must call this function with a long "name" variable. It can...
CVE-2000-1150
Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-1150
Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-1150
Felix IRC client on BeOS r5 pro and earlier is affected. A remote adversary can trigger a denial of service by delivering a message containing a long URL, exploiting handling of URL strings in the client. The CVSSv2 base score is 5.0 (Medium) with Network access, required no authentication, and t...
beos vulnerabilities
This advisory was actually written by me back in febuary this year, only to be misplaced and forgotten about until now. Some of the applications listed, most noteably baxter and the other irc clients, were patched earlier this year as a result of me informing the relevant developers. These...