6788 matches found
CVE-2004-0615: Undefined Security Weakness
Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...
PT-2004-1707 · D Link · D-Link Di-624 +2
Name of the Vulnerable Software and Affected Versions: D-Link DI-614+ SOHO router version 2.30 D-Link DI-704 SOHO router version 2.60B2 D-Link DI-624 affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote...
CVE-2004-0606: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...
ISC DHCP buffer overflow
Buffer overflow on oversized hostname in DHCP query, if hostname is splitted to few attributes...
CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...
CVE-2004-0460: Undefined Security Weakness
Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...
mozilla -- hostname spoofing bug
When processing URIs that contain an unqualified host name-- specifically, a domain name of only one component-- Mozilla will perform matching against the first component of the domain name in SSL certificates. In other words, in some situations, a certificate issued to "www.example.com" will be...
CVE-2003-1377
Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...
CVE-2003-0976
NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...
sipD DoS
Because of insufficient check of gethostbynamer results is's possible to crash service with unresolvable hostname...
CVE-2003-0976
NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...
CVE-2003-0976: Undefined Security Weakness
NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...
DEBIAN-CVE-2003-0832
Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...
WinShadow buffer overflow
Buffer overflow on oversized hostname, DoS...
CVE-2003-0832
Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...
CVE-2003-0832: Undefined Security Weakness
Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...
CVE-2003-0742: Undefined Security Weakness
SCO Internet Manager mana allows local users to execute arbitrary programs by setting the REMOTEADDR environment variable to cause menu.mana to run as if it were called from ncsahttpd, then modifying the PATH environment variable to point to a malicious "hostname" program...
Solaris sadmind Command Execution
This exploit targets a weakness in the default security settings of the Sun Solstice AdminSuite distributed system administration daemon sadmind RPC application. This server is installed and enabled by default on most versions of the Solaris operating system. Vulnerable systems include Solaris 2....
WebLogic Crafted GET Request Hostname Disclosure
The remote WebLogic server discloses its NetBIOS host name when it is issued a request generating a redirection. An attacker may use this information to better prepare other attacks against this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...