9431 matches found
CVE-2005-0435
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog...
CVE-2005-0435
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog...
AN HTTPD 1.42 - Arbitrary Log Content Injection
source: https://www.securityfocus.com/bid/13069/info AN HTTPD is affected by a vulnerability that may allow remote attacker to inject arbitrary content in to the log file. This issue arises due to a failure of input validation. Corruption of logs may result in concealing attacks and/or misleading...
CVE-2003-1122
CVE-2003-1122 affects ScriptLogic 4.01 and possibly earlier than 4.14. The related Nessus plugin confirms that the LOGS$ share is accessible and improperly permissioned, allowing remote readers/modifiers of logs and potentially execution of code. The CVE description notes insecure permissions tha...
CVE-2005-0435
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog...
CVE-2005-0435
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog...
[SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 674-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...
CVE-2005-0281
The CVE-2005-0281 entry describes an XSS in the web interface of Soldner Secret Wars 30830. The vulnerability arises because a user message is not filtered or quoted when administrators view server logs, allowing remote attackers to inject arbitrary web script or HTML. Documented references catal...
CVE-2005-0281
Cross-site scripting XSS vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs...
CVE-2004-2713
Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\ to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product...
PT-2004-3603 · Zonealarm · Zonealarm Pro
Name of the Vulnerable Software and Affected Versions: Zone Alarm Pro versions 1.0 through 5.1 Description: The issue allows local users to cause a denial of service by modifying the folder contents or permissions of the %windir%Internet Logs directory, which is accessible to the EVERYONE group...
samba -- integer overflow vulnerability
Greg MacManus, iDEFENSE Labs reports: Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary...
Subversion: Metadata information leak
Background Subversion is a versioning system designed to be a replacement for CVS. modauthzsvn is an Apache module to do path-based authentication for Subversion repositories. Description There is a bug in modauthzsvn that causes it to reveal logged metadata regarding commits to protected areas...
SAFE TEAM Regulus Customer Statistics Connection Log Information Disclosure
Binary data 2273.prm...
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure
source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid credentials. An attacker may employ data that is obtained in this mann...
CVE-2003-0020
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...
CVE-2003-0020
Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences...
GLSA-200403-04 : Multiple security vulnerabilities in Apache 2
The remote host is affected by the vulnerability described in GLSA-200403-04 Multiple security vulnerabilities in Apache 2 Three vulnerabilities were found: A memory leak in sslengineio.c for modssl in Apache 2.0.48 and below allows remote attackers to cause a denial of service attack via plain...