PVote 1.0/1.5 - Unauthorized Administrative Password Change

source: https://www.securityfocus.com/bid/4541/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible to change the administrative password by submitting a malicious web request containing the...

Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow

Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3443/info A buffer overflow condition can be triggered in Oracle 9iAS Web Cache 2.0.0.1.0 by submitting a malicious URL. This overflow can lead to either the process exiting, the process hanging, or the...

DoS против IIS 5.0 (Malformed URL)

Специально сконструированная URL определенной длинны приводит к краху IIS...

Bajie 0.78 - Arbitrary Shell Command Execution

Bajie 0.78 - Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/2389/info Requesting a specailly crafted URL containg arbitrary code, can be exected on a Unix system running Bajie Webserver. Any arbitrary commands appended to a malicious URL after the ';' will be executed...

Bajie 0.78 - Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/2389/info Requesting a specailly crafted URL containg arbitrary code, can be exected on a Unix system running Bajie Webserver. Any arbitrary commands appended to a malicious URL after the ';' will be executed as an independent job...

KICQ 1.0 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/2443/info KICQ is an ICQ-compatible interactive messaging client for Unix. Versions of KICQ are vulnerable to remote execution of arbitrary commands embedded in URLs. A maliciously-composed URL containing shell metacharacters and shell commands can be sen...

KICQ 1.0 - Arbitrary Command Execution

KICQ 1.0 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2443/info KICQ is an ICQ-compatible interactive messaging client for Unix. Versions of KICQ are vulnerable to remote execution of arbitrary commands embedded in URLs. A maliciously-composed URL containing shell...

MDKSA-2000:041 - xpdf update

Linux-Mandrake Security Update Advisory Package name: xpdf Date: August 29th, 2000 Advisory ID: MDKSA-2000:041 Affected versions: 6.0, 6.1, 7.0, 7.1 Problem Description: There is a potential race condation when using tmpnam and fopen in xpdf versions prior to 0.91. This exploit can be only used a...