Lucene search
+L

5586 matches found

UbuntuCve
UbuntuCve
added 2006/06/01 5:2 p.m.23 views

CVE-2006-2754

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

5CVSS6.5AI score0.04487EPSS
Exploits0References2
Prion
Prion
added 2006/06/01 5:2 p.m.14 views

Stack overflow

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

5CVSS8.1AI score0.04487EPSS
Exploits0References14Affected Software1
Cvelist
Cvelist
added 2006/06/01 5:0 p.m.20 views

CVE-2006-2754

Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname...

7.6AI score0.04487EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2006/05/13 12:0 a.m.28 views

FreeBSD : firefox & mozilla -- buffer overflow vulnerability (8665ebb9-2237-11da-978e-0001020eed82)

Tom Ferris reports : A buffer overflow vulnerability exists within Firefox version 1.0.6 and all other prior versions which allows for an attacker to remotely execute arbitrary code on an affected host. The problem seems to be when a hostname which has all dashes causes the NormalizeIDN call in...

7.5CVSS6.5AI score0.21112EPSS
Exploits2References6
0day.today
0day.today
added 2006/03/22 12:0 a.m.22 views

ASP.NET w3wp (COM Components) Remote Crash Exploit

Exploit for unknown platform in category dos / poc ================================================== ASP.NET w3wp COM Components Remote Crash Exploit ================================================== // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include...

7AI score
Exploits0
NVD
NVD
added 2006/03/21 1:6 a.m.10 views

CVE-2006-1061

Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL tftp:// with a valid hostname and a long path...

7.5CVSS7.8AI score0.0509EPSS
Exploits0References13
Prion
Prion
added 2006/03/19 1:2 a.m.18 views

Authentication flaw

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address...

7.5CVSS7.2AI score0.01548EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2006/03/19 1:2 a.m.18 views

CVE-2006-1253

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address...

7.5CVSS6.6AI score0.01548EPSS
Exploits0References3
Cvelist
Cvelist
added 2006/03/19 1:0 a.m.23 views

CVE-2006-1253

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address...

6.6AI score0.01548EPSS
Exploits0References3
CVE
CVE
added 2006/03/19 1:0 a.m.48 views

CVE-2006-1253

CVE-2006-1253 affects glFTPd prior to 2.01 RC5, where a crafted DNS hostname could bypass IP checks, potentially spoofing an IP-like hostname. The PT-2006-2269 entry confirms the vulnerable range and provides a remediation: update to version 2.01 RC5 or later. No exploitation details are provided...

7.5CVSS6.7AI score0.01548EPSS
Exploits0References3Affected Software1
Exploit DB
Exploit DB
added 2006/03/10 12:0 a.m.41 views

Guppy 4.5.11 - Delete Databases Remote Denial of Service

Change line 30 s/htp/http if you would like to see the logo. /str0ke Guppy = 4.5.11 Remote DOS Exploit Guppy = 4.5.11 Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute KAPDA span cl...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/01/28 12:0 a.m.35 views

SHOUTcast 1.9.4 - File Request 'Leaked' Format String

/ Shoutcast include include include include include include include include include include include define SHELLPORT 7000 define SHELLCOMMAND "unset HISTFILE; uname -a; id;" if 1 unsigned char shellcode = / bindshell 7000 Unknown /...

7.4AI score
Exploits0
UbuntuCve
UbuntuCve
added 2005/12/31 5:0 a.m.25 views

CVE-2005-4685

Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a...

6.4CVSS5.8AI score0.01182EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2005/12/31 5:0 a.m.29 views

CVE-2005-4684

Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for a...

6.4CVSS5.8AI score0.01409EPSS
Exploits0References1
OSV
OSV
added 2005/12/08 1:3 a.m.4 views

DEBIAN-CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

4.6CVSS7.1AI score0.00516EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2005/12/08 1:0 a.m.29 views

CVE-2005-4077

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

4.6CVSS6.6AI score0.00516EPSS
Exploits0
Cvelist
Cvelist
added 2005/11/16 9:17 p.m.17 views

CVE-2002-2205

Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname...

7.9AI score0.02737EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.14 views

SOCKS4A Hostname Overflow DoS Vulnerability

It was possible to kill the remote SOCKS4A server by sending a request with a too long hostname. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

7.5CVSS6.8AI score0.06503EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.17 views

PPTP Service Detection

The remote host seems to be running a PPTP VPN service, this service allows remote users to connect to the internal network and play a trusted rule in it. This service should be protect with encrypted username & password combinations, and should be accessible only to trusted individuals. By defau...

6.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2005/10/20 12:0 a.m.33 views

Debian DSA-866-1 : mozilla - several vulnerabilities

Several security-related problems have been discovered in Mozilla and derived programs. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2871 Tom Ferris discovered a bug in the IDN hostname handling of Mozilla that allows remote attackers to cause a...

7.5CVSS6.8AI score0.21112EPSS
Exploits2References12
Rows per page
Query Builder