5887 matches found
Shell Command Execution Vulnerability
The remote port seems to be running some form of shell script, with some provided user input. The input is not stripped for such meta characters as SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Possible Bug in PHP-Fusion 6.0.204
There is a Bug in The News-System: Post something like: memetata http-equiv = "refresh" content = "1; URL = http://www.google.com" and you'll be redirected to google. Possible Solution: use a recursive function to filter metatags...
CVE-2001-1512: Undefined Security Weakness
Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages JSP, a variant of CVE-2000-1050...
multihtml.c.exploit.txt
Multihtml.c Security Advisory Pot Kettle Industries Topic: Multihtml.c exploit remote vulnerability Category: Remote for Remote Vendor: bansh33 , r00tabega security labs Announced: 2005-06-10 Credits: Pot Kettle Industries Affects: All Platforms Corrected: N/A URL: http://potkettle.net/advisories...
GLSA-200504-17 : XV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-17 XV: Multiple vulnerabilities Greg Roelofs has reported multiple input validation errors in XV image decoders. Tavis Ormandy of the Gentoo Linux Security Audit Team has reported insufficient validation in the PDS Planetar...
Debian DSA-694-1 : xloadimage - missing input sanitising, integer overflow
Several vulnerabilities have been discovered in xloadimage, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0638 Tavis Ormandy of the Gentoo Linux Security Audit Team has reported a flaw in the handling of compressed images,...
Debian DSA-695-1 : xli - buffer overflow, input sanitising, integer overflow
Several vulnerabilities have been discovered in xli, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2001-0775 A buffer overflow in the decoder for FACES format images could be exploited by an attacker to execute arbitrary code...
LHa: Multiple vulnerabilities
Background LHa is a console-based program for packing and unpacking LHarc archives. Description The command line argument as well as the archive parsing code of LHa lack sufficient bounds checking. Furthermore, a shell meta character command execution vulnerability exists in LHa, since it does no...
Important: Red Hat Security Advisory: lha security update
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...
Important: Red Hat Security Advisory: lha security update
An updated lha package that fixes a buffer overflow is now available. LHA is an archiving and compression utility for LHarc format archives. Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an...
CVE-2004-0479: Undefined Security Weakness
Internet Explorer 6 allows remote attackers to cause a denial of service crash via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference...
lha -- numerous vulnerabilities when extracting archives
Source code reviews of lha by Lukasz Wojtow, Thomas Biege, and others uncovered a number of vulnerabilities affecting lha: Buffer overflows when handling archives and filenames. CVE-2004-0694 Possible command execution via shell meta-characters when built with NOMKDIR. CVE-2004-0745 Buffer overfl...
Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service
Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service source: https://www.securityfocus.com/bid/10351/info It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup' method to...
Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service
source: https://www.securityfocus.com/bid/10351/info It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup' method to invoke the 'http-equiv' meta tag. This issue could be exploited by a remo...
CVE-2002-2308
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself...
REFRESH: EUDORA MAIL 5.1.1
Tuesday, July 23, 2002 Trivial silent delivery and installation of an executable on a target computer. This can be accomplished with the default installation of the mail client Eudora 5.1.1: 'allow executables in HTML content' DISABLED 'use Microsoft viewer' ENABLED The manufacturer...
Code execution via Eudora
Using META REFRESH it's possible to launch mhtml file...
Выполнение приложений через Microsoft Internet Explorer для Macintosh (code execution)
Можно выполнить служебный системный скрипт через META REFRESH. Или через файл с образом диска...
New getAccess[tm] Vulnerability
Good Morning Listmembers, this is another postingsee 1st here http://www.securityfocus.com/bid/3109 about Entrust s "getAccesstm" product Problem Description: "getAccesstm" still uses default shellscripts which start java-classes for their web-applications. due to missing input-validation it is...