CVE-2005-0744

The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by 1 sniffing the connection on TCP port 51100 and replaying the authentication information or 2 obtaining and replaying the PCZQX02 authentication cookie from the browser...

CVE-2005-0744

The CVE-2005-0744 issue affects the web GUI of Novell iChain versions 2.2 and 2.3 SP2/SP3. The underlying risk is session hijacking leading to administrator privileges via two methods: (1) sniffing the connection on TCP port 51100 and replaying authentication data, and (2) obtaining and replaying...

CVE-2005-0744

The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by 1 sniffing the connection on TCP port 51100 and replaying the authentication information or 2 obtaining and replaying the PCZQX02 authentication cookie from the browser...

[SA14527] Novell iChain Administrator Session Hijacking Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

CVE-2005-0248

The CVE-2005-0248 issue affects the Solaris Management Console (SMC) GUI on Solaris 8 and 9. When creating user accounts configured for password aging, the GUI creates accounts with a blank password. This allows remote or local attackers to break into those accounts. The available documents do no...

[SA13803] Sun SMC GUI Account With Empty Password Creation Security Issue

TITLE: Sun SMC GUI Account With Empty Password Creation Security Issue SECUNIA ADVISORY ID: SA13803 VERIFY ADVISORY: http://secunia.com/advisories/13803/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun...

CVE-2004-2278

Unknown cross-site scripting XSS vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors...

CVE-2004-2626

GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message...

CVE-2004-0962

Apple Remote Desktop Client 1.2.4 is affected: when launched by an Apple Remote Desktop Administrator, it can run a GUI application as root, enabling remote authenticated users to execute arbitrary code with loginwindow active via Fast User Switching. This is corroborated by Red Hat and CVE datab...

Kaspersky AntiVirus Window Caption GUI Bypass Vulnerability

I have discovered that the GUI part of KAV v5.0x kav.exe has a vulnerability that would allow any user to completely BYPASS the "password protection" in order to change settings or completely disable/exit KAV. There are dosens of shareware/freeware applications available on the internet that a us...

CVE-2003-0994

The CVE-2003-0994 issue affects Symantec LiveUpdate GUI between versions 1.70.x and 1.90.x, as used in Norton Internet Security 2001–2004, SystemWorks 2001–2004, and Antivirus/Norton Antivirus Pro 2001–2004, plus LiveUpdate for Handhelds v3.0. The vulnerability enables local users to escalate pri...

GLSA-200408-01 : MPlayer: GUI filename handling overflow

The remote host is affected by the vulnerability described in GLSA-200408-01 MPlayer: GUI filename handling overflow The MPlayer GUI code contains several buffer overflow vulnerabilities, and at least one in the TranslateFilename function is exploitable. Impact : By enticing a user to play a file...

MPlayer <= 1.0pre4 GUI filename handling Overflow Exploit

Exploit for linux platform in category remote exploits ========================================================= MPlayer include include include include include include include include define SUCCESS 0 / True / define FAILURE 1 / False / define ABANNER "MPlayerMeMPlayerMediaMayhem" define ALIGN 0...

MPlayer MeMPlayer.c

/ $ An open security advisory 5 - MPlayer GUI filename handling overflow 1: Bug Researcher: [email protected] 2: Bug Released: June 28th 2004 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote / Local MPlayer Media Player http://www.mplayerhq.hu MPlayer is a movie player for Linux...

Sygate Personal Firewall Pro 5.5 - Local Denial of Service

source: https://www.securityfocus.com/bid/10542/info A local denial of service vulnerability is reported to affect the Sygate Personal Firewall. It is reported that the smc.exe service may be crashed using the List-View Control in the Sygate Personal Firewall GUI. This issue may be exploited in...

CVE-2002-1579

SAP GUI Sapgui 4.6D allows remote attackers to cause a denial of service crash via a connection to a high-numbered port, which generates an "unknown connection data" error...

Microsoft Outlook Express 6.0 - Remote Denial of Service

Microsoft Outlook Express 6.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/10144/info Microsoft Outlook and Outlook Express have been reported prone to a remote denial of service vulnerability. The issue is reported to present itself when a NULL is encountered in the messa...

Check Point Smartview Tracker buffer overflow

Buffer overflow in GUI during viewing oversized column...

Symantec Client Firewall Products 5 - SYMNDIS.SYS Driver Remote Denial of Service

Symantec Client Firewall Products 5 - SYMNDIS.SYS Driver Remote Denial of Service source: https://www.securityfocus.com/bid/9912/info Symantec Client Firewall has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself in the TCP packet...

Symantec Client Firewall Products 5 - 'SYMNDIS.SYS' Driver Remote Denial of Service

source: https://www.securityfocus.com/bid/9912/info Symantec Client Firewall has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself in the TCP packet processing routines of the affected software. It is reported that this vulnerability wi...