1559 matches found
CVE-2006-0046
squidredirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service CPU consumption via a URL with a large number of trailing / forward slashes, which might produce inefficient regular expressions...
CVE-2005-3913
Unspecified vulnerability in the domain alias management in Virtual Hosting Control System VHCS 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the forwardings of other users...
CVE-2003-1076
Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service unknown impact and possibly gain privileges via certain constructs in a .forward file...
Sendmail .forward File Local Privilege Escalation
Binary data 2009.prm...
Sendmail .forward File Local Privilege Escalation
Binary data 2010.prm...
CVE-2003-1076
Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service unknown impact and possibly gain privileges via certain constructs in a .forward file...
FTP Server root Directory .forward File Present
The remote anonymous FTP server has a .forward file set in its home. An attacker may use it to determine who is in charge of the FTP server and set up a social engineering attack. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11565; scriptversion "$Revision: 1.18 $";...
CVE-2003-0080
The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...
Solaris sendmail .forward Local Privilege Escalation
The remote sendmail server, according to its version number, may be vulnerable to a local privilege escalation attack when using forward files. Sun did not increase the version number of their sendmail when patching Solaris 7 and 8, so this might be a false positive on these platforms. An attacke...
FreeBSD-SA-02:41.smrsh
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:41.smrsh Security Advisory The FreeBSD Project Topic: smrsh restrictions can be bypassed REVISED Category: core Module: contribsendmail Announced: 2002-11-15 Credits:...
ZoneEdit Account Hijack Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== secondmotion-SM-SA-02-02 Security Advisory ===================================================================== Topic: ZoneEdit Account Hijack Vulnerability Announced: 2002-11-05...
CVE-1999-1223
IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / forward slash characters...
CVE-1999-0971
CVE-1999-0971 describes a buffer overflow in the Exim mail transfer agent that allows local users to gain root privileges through a long :include: option in a .forward file. The affected component is Exim; the underlying cause is a buffer overflow triggered by the :include: option. The public des...
Apache for Windows Multiple Forward Slash Directory Listing
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. %NASLMINLEVEL 70300 This...
CVE-1999-0971
Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file...
PT-1996-1019 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows local users to write to a file and gain group permissions via a .forward or :include: file. Recommendations: At the moment, there is no information about a newer version...
CVE-2026-65138
Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a malformed forward data RPC with a missing socket address...
