9526 matches found
CVE-2003-0549
The X Display Manager Control Protocol XDMCP support for GDM before 2.4.1.6 allows attackers to cause a denial of service daemon crash via a short authorization key name...
DEBIAN-CVE-2003-0516
cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...
CVE-2002-1566
netris 0.5, and possibly other versions before 0.52, when running with the -w wait option, allows remote attackers to cause a denial of service crash via a long string to port 9284...
CGI bugs
No description provided...
[SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 368-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0148
The default installation of MSDE via McAfee ePolicy Orchestrator 2.0 through 3.0 allows attackers to execute arbitrary code via a series of steps that 1 obtain the database administrator username and encrypted password in a configuration file from the ePO server using a certain request, 2 crack t...
CVE-2003-0596
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...
CGI bugs
No description provided...
CGI bugs
No description provided...
CVE-2003-0396
Buffer overflow in les for ATM on Linux linux-atm before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command line argument...
compaq.txt
SSI vulnerability in Compaq Web Based Management Agent ====================================================== Type of vulnerabilities: Server Side Include injection. Exploitable. Stack overflows and access violations. Exploitable? Creation of script objects. Exploitable? Affected Software: Compaq...
Bahamut IRCd format string bug
Format string bug during ident check...
Multiple Dangerous CGI Script Detection
It is possible that the remote web server contains one or more dangerous CGI scripts. Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities. %NASLMINLEVEL 70300 This script was written by...
[SECURITY] [DSA-314-1] New atftp packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 314-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 11th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0413
Cross-site scripting XSS vulnerability in the webapps-simple sample application for 1 Sun ONE Application Server 7.0 for Windows 2000/XP or 2 Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" erro...
CVE-2003-0412
Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities...
BEA WebLogic FileServlet Source Code Disclosure
The version of the WebLogic web application installed on the remote host contains a flaw such that by inserting a /ConsoleHelp/ into a URL, critical source code files may be viewed. %NASLMINLEVEL 70300 This script was written by John [email protected] Modifications by Tenable Network...
CVE-2003-0393
The CVE-2003-0393 entry concerns Privacyware Privatefirewall 3.0, where the product fails to block certain incoming packets when in Filter Internet Traffic or Deny Internet Traffic modes. This behavior can allow remote attackers to identify running services via FIN scans or Xmas scans. According ...
CVE-2003-0393
Privacyware Privatefirewall 3.0 does not block certain incoming packets when in "Filter Internet Traffic" or Deny Internet Traffic" modes, which allows remote attackers to identify running services via FIN scans or Xmas scans...