Lucene search
+L

4483 matches found

myhack58
myhack58
•added 2006/05/16 12:00 a.m.•52 views

Do All in Cmd Shell-vulnerability warning-the black bar safety net

Directory 1, Preface 2, The file transmission 3, The system configuration 4, the network configuration 5, software installation 6, Windows Script 7, The accompanying statement Foreword Cmd Shellcommand line interactionis a hack eternal topic, it is the historic and enduring it. This article is...

7.7AI score
SaveExploits0
NVD
NVD
•added 2006/05/15 4:06 p.m.•26 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6.8AI score0.01213EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2006/05/15 4:06 p.m.•34 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6AI score0.01213EPSS
SaveExploits0References1
Prion
Prion
•added 2006/05/15 4:06 p.m.•23 views

Design/Logic Flaw

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS7AI score0.01213EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2006/05/15 4:06 p.m.•13 views

DEBIAN-CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6.1AI score0.01213EPSS
SaveExploits0References1
OSV
OSV
•added 2006/05/15 4:06 p.m.•18 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

6.7AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2006/05/15 4:00 p.m.•56 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6.6AI score0.01213EPSS
SaveExploits0
CVE
CVE
•added 2006/05/15 4:00 p.m.•56 views

CVE-2006-2366

CVE-2006-2366 affects libopenobex/ircp 1.2. The ircp -r mode does not prompt before overwriting files in OBEX File Transfer, allowing user-assisted remote attackers to overwrite arbitrary destination files. Concrete details in the NVD/NVD-derived entries confirm the vulnerability in ircp_io.c and...

2.6CVSS6.8AI score0.01213EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2006/05/15 4:00 p.m.•36 views

CVE-2006-2366

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

6.8AI score0.01213EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/15 12:00 a.m.•7 views

CVE-2006-2366: Undefined Security Weakness

ircpio.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session...

2.6CVSS6AI score0.01213EPSS
SaveExploits0References1
Prion
Prion
•added 2006/04/25 12:50 p.m.•25 views

Heap overflow

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port...

7.5CVSS8.9AI score0.04677EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2006/04/25 12:50 p.m.•24 views

CVE-2006-2007

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port...

7.5CVSS8.1AI score0.04677EPSS
SaveExploits0References8
CVE
CVE
•added 2006/04/25 10:00 a.m.•70 views

CVE-2006-2007

CVE-2006-2007 describes a heap-based buffer overflow in Winny 2.0 b7.1 and earlier. The vulnerability occurs when processing certain commands sent to the file transfer port, using unvalidated input (long strings) that can lead to remote code execution. Affected product: Winny (2.0 b7.1 and earlie...

7.5CVSS8.1AI score0.04677EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/25 12:00 a.m.•7 views

CVE-2006-2007: Undefined Security Weakness

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port...

7.5CVSS6.8AI score0.04677EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
•added 2006/03/26 12:00 a.m.•31 views

How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk

Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...

5.4CVSS1.9AI score0.00832EPSS
SaveExploits0
NVD
NVD
•added 2006/03/23 11:06 p.m.•27 views

CVE-2006-1366

Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service device shutdown, and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer aka FTP service on Bluetooth channel 9...

7.8CVSS7.7AI score0.04998EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/23 12:00 a.m.•12 views

CVE-2006-1366: Undefined Security Weakness

Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service device shutdown, and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer aka FTP service on Bluetooth channel 9...

7.8CVSS6.2AI score0.04998EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2006/03/22 12:00 a.m.•43 views

[Full-disclosure] DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack'

DMA2006-0321a - 'Motorola P2K Platform setpath overflow and Blueline attack' Author: Kevin Finisterre Vendor: http://www.motorola.com Product: 'Motorola PEBL U6, Motorola V600, other Motorola P2k based phones?' References: http://www.digitalmunition.com/DMA2006-0321a.txt...

0.5AI score
SaveExploits0
curl security advisories
curl security advisories
•added 2006/03/20 8:00 a.m.•21 views

TFTP Packet Buffer Overflow

libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix "tftp://", using a valid host and a path part that is longer tha...

7.5CVSS8.5AI score0.05254EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
•added 2006/01/15 12:00 a.m.•32 views

Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-139-1)

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented 'a', a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member. Note that Tenable Network Security has...

5CVSS5.7AI score0.02481EPSS
SaveExploits0References1
Rows per page
Query Builder