5424 matches found
CVE-2005-4076
Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENTHOME environment variable...
CVE-2005-4076
The CVE-2005-4076 entry concerns Appfluent Technology Database IDS 2.0. A buffer overflow can be triggered by a long APPFLUENT_HOME environment variable, allowing local users to execute arbitrary code. The vulnerability is local in scope with partial confidentiality, integrity, and availability i...
Appfluent Database IDS < 2.1.0.103 (Env Variable) Local Exploit
No description provided by source. / $ An open security advisory 14 - Appfluent Database IDS Environment Variable Overflow 1: Bug Researcher: c0ntex - c0ntexbatgmail.com -+- www.open-security.org 2: Bug Released: December 07th 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Local root $ This...
Appfluent Database IDS < 2.1.0.103 - Environment Variable Local Overflow
/ $ An open security advisory 14 - Appfluent Database IDS Environment Variable Overflow 1: Bug Researcher: c0ntex - c0ntexbatgmail.com -+- www.open-security.org 2: Bug Released: December 07th 2005 3: Bug Impact Rate: Hi 4: Bug Scope Rate: Local root $ This advisory and/or proof of concept code mu...
Cisco PIX - TCP SYN Packet Denial of Service
Cisco PIX - TCP SYN Packet Denial of Service source: https://www.securityfocus.com/bid/15525/info Cisco PIX is susceptible to a remote denial-of-service vulnerability when handling certain TCP SYN packets. This issue allows attackers to temporarily block network traffic to arbitrarily targeted TC...
X-News '/db/users.txt' Information Disclosure Vulnerability
X-News is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2004 Audun Larsen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Synchrologic Email Accelerator User Account Information Disclosure
Synchrologic Email Accelerator is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Anti-Scanner Defenses (HTTP)
It seems that the remote web server rejects HTTP requests from the Scanner. It is probably protected by a reverse proxy, WAF or IDS/IPS. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved detection code since 2018 Greenbone AG Some text descriptions might be excerpte...
Skype security advisory
Synopsis ======== The EADS/CRC security team discovered a flaw in Skype client. Skype is a P2P VoIP software that can bypass firewalls and NAT to connect to the Skype network. Skype is very popular because of its sound quality and ease of use. Skype client is available for Windows, Linux, Mac OS ...
CVE-2004-2490
CVE-2004-2490 describes a buffer overflow in IBM Informix Dynamic Server (IDS) , affecting versions 9.40.xC1 and 9.40.xC2 . The root cause is a vulnerability in the handling of a long GL_PATH environment variable, which allows local users to execute arbitrary code . The impact is local code execu...
CVE-2004-2489
CVE-2004-2489 concerns IBM Informix Dynamic Server (IDS). The described vulnerability is a format string flaw in IDS prior to 9.40.xC3 that enables local code execution when an attacker manipulates the INFORMIXDIR environment variable to point to a file containing format string specifiers in its ...
MS-RPC over CIFS Inspection Properties (CVE-2003-0533)
DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...
VERITAS Storage Exec DCOM servers contain multiple buffer overflows
Overview VERITAS Storage Exec contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS Storage Exec is software package that performs storage management. Multiple DCOM server components provided by Storage Exec...
CVE-2005-2695
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...
CVE-2005-2695
Technical details (affected components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates to CVE-2005-2695 in the included records (NVD/CVE/CVELIST) for new information.
CVE-2005-2695
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...
