Gemitel 3.50 - affich.php Remote File Inclusion Command Injection

Gemitel 3.50 - affich.php Remote File Inclusion Command Injection source: https://www.securityfocus.com/bid/10156/info A vulnerability has been identified in the handling of input by Gemitel. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the...

Andys PHP Projects Man Page Lookup Script - Information Disclosure

Andys PHP Projects Man Page Lookup Script - Information Disclosure source: https://www.securityfocus.com/bid/9395/info A problem in the handling of user-supplied input by Andy's PHP Projects Man Page Lookup script has been reported. Because of this, it is possible for an attacker to gain...

Andy's PHP Projects Man Page Lookup Script - Information Disclosure

source: https://www.securityfocus.com/bid/9395/info A problem in the handling of user-supplied input by Andy's PHP Projects Man Page Lookup script has been reported. Because of this, it is possible for an attacker to gain unauthorized access to sensitive information on a system...

DansGuardian 2.2.x - Denied URL Cross-Site Scripting

DansGuardian 2.2.x - Denied URL Cross-Site Scripting source: https://www.securityfocus.com/bid/8876/info A problem has been reported in the handling of some types of input to DansGuardian. This problem may permit an attacker to launch cross-site scripting attacks...

DansGuardian 2.2.x - Denied URL Cross-Site Scripting

source: https://www.securityfocus.com/bid/8876/info A problem has been reported in the handling of some types of input to DansGuardian. This problem may permit an attacker to launch cross-site scripting attacks...

[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 395-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 395-1] New tomcat4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 395-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2003 http://www.debian.org/security/faq -...

DSA-395 tomcat4 - incorrect input handling

Bulletin has no description...

Moozatech: WZFTPD Denial Of Service

23/09/03 Moozatech Advisory http://www.moozatech.com/mt-23-09-2003.txt ------------------------------------------------------- Application: wzdftpd FTP Server Web Site: http://www.wzdftpd.net Versions: 0.1rc5 Platform: Windows 2000,WindowsXP,UNIX systems might also be affected. Risk: Remote DOS...

Tutos 1.1 - File_Select.php Cross-Site Scripting

Tutos 1.1 - FileSelect.php Cross-Site Scripting source: https://www.securityfocus.com/bid/8011/info It has been reported that Tutos does not properly handle input to the fileselect script. Because of this, an attacker may be able to execute code in the browser of another user with the privileges ...

Tutos 1.1 - File_New Arbitrary File Upload

source: https://www.securityfocus.com/bid/8012/info It has been reported that Tutos does not properly handle input to the filenew script. Because of this, an attacker may be able to upload arbitrary files to a vulnerable site. We can upload via...

Tutos 1.1 - 'File_Select.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8011/info It has been reported that Tutos does not properly handle input to the fileselect script. Because of this, an attacker may be able to execute code in the browser of another user with the privileges of the vulnerable site...

CVE-2003-0161

The prescan function in the address parser parseaddr.c in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers t...

Man Program 1.5 - Unsafe Return Value Command Execution

source: https://www.securityfocus.com/bid/7066/info It has been reported that the man program does not properly handle some types of input. When a man page is processed that could pose a potential security risk, the program reacts in a way that may open a window of opportunity for an attacker to...

Axis Communications Video Server 2.x - Command.cgi File Creation

Axis Communications Video Server 2.x - Command.cgi File Creation source: https://www.securityfocus.com/bid/6987/info It has been reported that the Axis Video Servers do not properly handle input to the 'command.cgi' script. Because of this, an attacker may be able to create arbitrary files that...

Xynph FTP Server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/6587/info A problem with the handling of input has been reported in Xynph FTP Server. Under some circumstances, it may be possible for a remote user to escape the FTP root directory using relative path notation. This could allow unauthorized access to...

[INetCop Security Advisory] Buffer Overflow vulnerability in HTTP Fetcher Library.

======================================== INetCop Security Advisory 2003-0x82-011 ======================================== Title: Buffer Overflow vulnerability in HTTP Fetcher Library. 0x01. Description HTTP Fetcher is a small library that downloads files via HTTP. More detailed information is...

SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal

SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal source: https://www.securityfocus.com/bid/6045/info SolarWinds TFTP Server is distributed for the Microsoft Windows platform. The SolarWinds TFTP Server does not properly handle user-supplied input. Due to insufficient handling ...

DSA-165 postgresql - buffer overflows

Bulletin has no description...

[SECURITY] [DSA 144-1] New wwwoffle packages fix security related problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 144-1 [email protected] http://www.debian.org/security/ Martin Schulze August 6th, 2002 - -------------------------------------------------------------------------- Package : wwwoffle...