Lucene search
+L

5930 matches found

seebug.org
seebug.org
added 2005/07/21 12:0 a.m.29 views

Intruder Client 1.00 Remote Command Execution & DoS Exploit

No description provided by source. !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build malicious pages..DONE + Open CDRo...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/07/13 12:0 a.m.26 views

FreeBSD : mozilla -- hostname spoofing bug (5360a659-131c-11d9-bc4a-000c41e2cdad)

When processing URIs that contain an unqualified host name-- specifically, a domain name of only one component-- Mozilla will perform matching against the first component of the domain name in SSL certificates. In other words, in some situations, a certificate issued to 'www.example.com' will be...

7.5CVSS5.3AI score0.01035EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2005/06/28 4:0 a.m.26 views

CVE-2002-1962

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...

6.7AI score0.01872EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2005/05/27 12:0 a.m.66 views

msmq_deleteobject_ms05_017.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

7.4AI score0.73267EPSS
SaveExploits11
Gentoo Linux
Gentoo Linux
added 2005/05/26 12:0 a.m.44 views

gxine: Format string vulnerability

Background gxine is a GTK+ and xine-lib based media player. Description Exworm discovered that gxine insecurely implements formatted printing in the hostname decoding function. Impact A remote attacker could entice a user to open a carefully crafted file with gxine, possibly leading to the...

7.5CVSS6.7AI score0.03259EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2005/05/24 4:0 a.m.24 views

CVE-2005-1692

Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers...

7.5CVSS6.3AI score0.03259EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2005/05/23 12:0 a.m.30 views

pst.advisory 2005-21: gxine remote exploitable . opensource is god .lol windows

gxine remote exploitable . opensource is god .lol windows www.ph4nt0m.org Systems affected: gxine 0.44 0.43 0.42 0.41 no affected no all exploitable 1:why: it is a http hostname format string vulnerability.. new firefox can run gxine in many linux DS... so very dangerous!!!!!!!!!!!!!!!!!! 2:tips:...

SaveExploits0
securityvulns
securityvulns
added 2005/05/23 12:0 a.m.30 views

gxine audio video player format string bug

Format string bug in hostname...

1.7AI score
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2005/05/02 4:0 a.m.27 views

CVE-2005-0337

Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...

7.5CVSS5.9AI score0.02806EPSS
SaveExploits0References1
OSV
OSV
added 2005/05/02 4:0 a.m.11 views

CVE-2005-0337

Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...

6.5AI score
SaveExploits0References7
OSV
OSV
added 2005/05/02 4:0 a.m.18 views

DEBIAN-CVE-2005-0337

Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...

7.5CVSS7AI score0.02806EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2005/04/21 4:0 a.m.35 views

CVE-2000-1222

AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program...

6.7AI score0.00341EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2005/04/21 4:0 a.m.33 views

CVE-1999-1583

Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument...

7.5AI score0.00633EPSS
SaveExploits1References3
CVE
CVE
added 2005/04/21 4:0 a.m.77 views

CVE-2000-1221

The CVE describes a vulnerability in the line printer daemon (lpd) in the lpr package across multiple Linux operating systems. The root cause is an authentication check that compares the reverse-resolved hostname of the local machine to the hostname returned by gethostname; remote attackers can b...

10CVSS6.7AI score0.16727EPSS
SaveExploits1References8Affected Software1
RedHat Linux
RedHat Linux
added 2005/04/20 5:26 p.m.10 views

security flaw

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file...

5.1CVSS6.4AI score0.03373EPSS
SaveExploits0References4
NVD
NVD
added 2005/04/19 4:0 a.m.13 views

CVE-2005-0755

Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file...

5.1CVSS7.7AI score0.03373EPSS
SaveExploits0References8
securityvulns
securityvulns
added 2005/04/14 12:0 a.m.122 views

Internet Explorer wininet.dll URL parsing memory corruption details

Vendor: Microsoft Software: Internet Explorer 6.0, 5.5, 5.01 Problem: Memory corruption, code execution Remote: Yes Risk Level: Medium to low hard to exploit Authors: Axle ICQ 755756 bug discovery 3APA3A, http://www.security.nnov.ru/ bug research Original URL:...

7.5CVSS0.1AI score0.5791EPSS
SaveExploits1
Cvelist
Cvelist
added 2005/03/12 5:0 a.m.25 views

CVE-2003-1129

Buffer overflow in the Yahoo! Audio Conferencing aka Voice Chat ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat...

8AI score0.08344EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2005/03/01 7:1 p.m.11 views

security flaw

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...

5CVSS5.9AI score0.01671EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2005/02/28 5:0 a.m.25 views

CVE-2005-0590

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...

6.2AI score0.01671EPSS
SaveExploits0References11
Rows per page
Query Builder