6589 matches found
CVE-2005-4681: Undefined Security Weakness
Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been disputed by the vendor, saying "as far as I can tell, this is neither an exploit nor a vulnerabilit...
CVE-2006-0255
Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the SrGUI.exe program...
Directory traversal
Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. dot dot in the RENAME command...
CVE-2006-0127
Rockliffe MailSite IMAP (pre-6.1.22.1) suffers a directory-traversal in the RENAME command that enables remote authenticated users to rename other users’ folders. Affects the IMAP service; impact includes partial integrity (I: Partial, A: None, C: None) with no confidentiality/availability impact...
CVE-2006-0127: Undefined Security Weakness
Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. dot dot in the RENAME command...
The reproduction of the former vulnerability--Qin bamboo musical program the negligent-vulnerability warning-the black bar safety net
A few days ago, downloaded a set of“Qin bamboo music network v3. 0 static generation”version, when tested, turned out to see former sun-the power upload vulnerability. Once Upon a time, the power upload vulnerability put in front of me, but even missed. Today, the former vulnerability in the Qin...
CVE-2005-4854
eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders...
CVE-2005-4681
Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been disputed by the vendor, saying "as far as I can tell, this is neither an exploit nor a vulnerabilit...
PT-2005-5346 · Mirc · Mirc
Name of the Vulnerable Software and Affected Versions: mIRC versions 5.91 through 6.16 Description: A buffer overflow issue allows local users to potentially execute arbitrary code by entering a long string after reaching the DCC Get Folder Dialog. The vendor has disputed this issue, suggesting i...
With adsutil. vbs+..\+cmd. ASP to create the perfect Backdoor-vulnerability warning-the black bar safety net
We have to do a good back door, while depressed, of those who ready-made backdoors in software are difficult to escape the antivirus software's hunted down, and write yourself back door of our small bugs are also seem to be not realistic. Below I will teach you a method that lets you build a...
CVE-2004-2584
CVE-2004-2584 affects SmarterTools SmarterMail 1.6.1511 and 1.6.1529. The description specifies that frmAddfolder.aspx allows remote authenticated users to create a folder that SmarterMail cannot delete or rename when the folder name contains a null byte ("%00"). The underlying cause is a folder ...
CVE-2004-2584
frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name with a null byte "%00". NOTE: it is not clear whether this issue poses a vulnerability...
CVE-2004-2584: Undefined Security Weakness
frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name with a null byte "%00". NOTE: it is not clear whether this issue poses a vulnerability...
CVE-2005-2939
VMware Workstation 5.0.0 build-13124 is affected by an unquoted Windows search path vulnerability that could let a local user gain privileges by placing a malicious C:\program.exe. Root cause: unquoted path in Windows search. Impact: local privilege escalation (consistency with CVSS 2.0 metrics)....
CVE-2005-2940
Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 Beta 1 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs 1 GIANTAntiSpywareMain.exe, 2 gcASNotice.exe, 3 gcasServ.exe, 4 gcasSWUpdater.exe, or 5...
CVE-2005-3663: Undefined Security Weakness
Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder...
CVE-2005-3647
Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory...
CVE-2005-3647
The CVE-2005-3647 issue is described as a local privilege-bypass in Folder Guard. Local users can bypass protections by running from or installing to the temporary files directory. Underlying cause: the temporary files path enables bypass of protections. Impact (per CVSS): partial confidentiality...