9165 matches found
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
tnftp: Arbitrary file overwriting
Background tnftp is a NetBSD FTP client with several advanced features. Description The 'mget' function in cmds.c lacks validation of the filenames that are supplied by the server. Impact An attacker running an FTP server could supply clients with malicious filenames, potentially allowing the...
Debian DSA-639-1 : mc - several vulnerabilities
Andrew V. Samoilov has noticed that several bugfixes which were applied to the source by upstream developers of mc, the midnight commander, a file browser and manager, were not backported to the current version of mc that Debian ships in their stable release. The Common Vulnerabilities and...
[Full-Disclosure] TFTPD32 Long FileName Remote Denial of Service
TFTPD32 Long FileName Remote Denial of Service By Sowhat 12.JAN.2005 http://secway.org/advisory/ad20050108.txt Product Affected: TFTPD 2.74 and prior Impact: Low 1 Introduction TFTPD32 is a bundle including a full featured TFTP server, a TFTP client, a DHCP server and a Syslog server. TFTPD32 is...
CVE-2004-1273
Buffer overflow in the DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a long filename...
CVE-2004-1232
Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename...
DEBIAN-CVE-2004-1170
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...
CVE-2004-1170
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...
[Full-Disclosure] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow
Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: LHA File Incorrect Filename Handeling Leads to Crash/Underflow Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...
[Full-Disclosure] WinHKI - LHA File Incorrect Filename Handeling Leads to Crash/Underflow
Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: LHA File Incorrect Filename Handeling Leads to Crash/Underflow Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...
[Full-Disclosure] WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU%
Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: BH File Incorrect Filename Handeling Leads to 100 CPU Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...
Mozilla, Firefox, Thunderbird: Various vulnerabilities
Background Mozilla is a popular web browser that includes a mail and newsreader. Mozilla Firefox and Mozilla Thunderbird are respectively the next-generation browser and mail client from the Mozilla project. Description Maurycy Prodeus from isec.pl found a potentially exploitable buffer overflow ...
Microsoft Internet Explorer directory traversal
.. in filename is not checked...
CVE-2004-2384
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
DEBIAN-CVE-2004-2187
Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors...
CVE-2004-2187
Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors...
CVE-2004-2187
Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors...
CVE-2004-1411
Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service infinite loop via a message that contains an image whose filename does not start with restricted characters...