4490 matches found
[Full-disclosure] JBoss jBPM 2.0: Remote code execution and classloader covert channel
Security Advisory: jBPM 2.0 Date: 06/22/05 URL: http://www.illegalaccess.org/java/jbpm.php " JBoss jBPM is a flexible, extensible workflow management system." jbpm.org Problem 1: Remote code execution possible with jBPM . This allows an attacker to trigger an arbitrary executable on the jBPM/ JBo...
PT-2005-1103 · Dan Bernstein +2 · Qmail +2
Name of the Vulnerable Software and Affected Versions: qmail affected versions not specified Description: The issue is caused by an integer overflow in the stralloc readyplus function in qmail. This allows remote attackers to cause a denial of service and possibly execute arbitrary code via a lar...
CVE-2005-0471
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that...
CVE-2003-1124
Unknown vulnerability in Sun Management Center SunMC 2.1.1, 3.0, and 3.0 Revenue Release RR, when installed and run by root, allows local users to create or modify arbitrary files...
PT-2005-1334 · Biborb · Biborb
Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue is related to the improper enforcement of a restriction for uploading only PDF and PS files. This allows remote attackers to upload arbitrary files, which are then presented to other...
FKey Arbitrary Remote File Disclosure
The remote finger daemon possibly 'fkey' allows users to read arbitrary files by supplying a file name that is 10 characters or shorter. A remote attacker could exploit this to read sensitive information, which could be used to mount further attacks. C Tenable Network Security, Inc...
PT-2004-3034 · Allwebscripts · Allwebscripts Mysqlguest
Name of the Vulnerable Software and Affected Versions: AllWebScripts MySQLGuest affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary HTML and PHP code via the Name, Email, Homepage, or...
Microsoft Security Bulletin MS04-040 Cumulative Security Update for Internet Explorer (889293)
Microsoft Security Bulletin MS04-040 Cumulative Security Update for Internet Explorer 889293 Issued: December 1, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
GLSA-200411-22 : Davfs2, lvm-user: Insecure tempfile handling
The remote host is affected by the vulnerability described in GLSA-200411-22 Davfs2, lvm-user: Insecure tempfile handling Florian Schilhabel from the Gentoo Linux Security Audit Team found that Davfs2 insecurely created .pid files in /tmp. Furthermore, Trustix Secure Linux found that the...
MailEnable Professional Webmail < 1.5.1 Unspecified Vulnerability
The version of MailEnable Professional hosted on the remote host has an unspecified vulnerability in the webmail module. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15611; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/07 16:46:51"; scriptbugtraqid11578;...
Microsoft Security Bulletin MS04-038 Cumulative Security Update for Internet Explorer (834707)
Microsoft Security Bulletin MS04-038 Cumulative Security Update for Internet Explorer 834707 Issued: October 12, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
WebMatic Unspecified Login Function Access Vulnerability
The remote host is running WebMatic, a web-based application designed to generate websites. The vendor has released WebMatic 1.9 to address an unknown flaw in earlier versions of the software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Solaris 8 (sparc) : 110075-03
Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem. Supported versions that are affected are 8 and 9. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...
jPortal print.inc.php id Parameter SQL Injection
The remote host appears to be running the jPortal CGI suite. There is a SQL injection vulnerability in the 'id' parameter of print.php. A remote attacker could exploit this to execute arbitrary SQL queries, which could be used to gain administrative access to this host. %NASLMINLEVEL 70300 C...
Util-linux login may leak sensitive data
Background Util-linux is a suite of essential system utilites, including login, agetty, fdisk. Description In some situations the login program could leak sensitive data due to an incorrect usage of a reallocated pointer. NOTE: Only users who have PAM support disabled on their systems i.e. -PAM i...
Aborior Encore WebForum display.cgi file Parameter Command Execution
The remote host is running the Aborior Web Forum. There is a flaw in this version that could allow an attacker to execute arbitrary commands on this server with the privileges of the affected web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
TYPSoft FTP Server 1.10 Invalid Path Request DoS
The remote host appears to be running TYPSoft FTP server. According to its banner, this version of the software has a denial of service vulnerability that can lead to complete exhaustion of CPU resources. This script was written by Audun Larsen Changes by Tenable: - Revised plugin title 2/03/2009...
Jigsaw < 2.2.4 Unspecified URI Parsing Unspecified Vulnerability
According to its banner, the remote version of Jigsaw web server has an unspecified vulnerability related to the way it parses URIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12071; scriptversion"1.16"; scriptcveid"CVE-2004-2274"; scriptbugtraqid9711;...
Compaq Web-Based Management Agent Remote Overflow DoS
It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. This flaw could be used to forbid managing machines. C Tenable Network Security, Inc. References: Message-ID: Date: Thu, 19 Jun 2003 00:05:14 +0200 CEST From:...
Jordan's Windows Telnet Server Password Handling Remote Overflow
According to its banner, the version of Jordan's Windows Telnet Server running on the remote host has a stack-based buffer overflow vulnerability in the login procedure. A remote attacker could exploit this to crash the service, or execute arbitrary code. C Tenable Network Security, Inc...