4 matches found
CVE-2005-4203
LogiSphere 0.9.9j is affected by CVE-2005-4203: an unrestricted ability to send messages via the msg command can be exploited remotely to cause denial of service by flooding the system with messages. Root cause: lack of restriction on the number of messages. The provided documents do not include ...
CVE-2005-4204: Undefined Security Weakness
Cross-site scripting XSS vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this issue is distinct from the msg DoS...
CVE-2005-4203: Undefined Security Weakness
LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this...
CVE-2004-2523
OpenFTPD affected: OpenFTPD 0.30.2 and earlier. The vulnerability is a format string flaw in the SITE MSG command’s msg.c (cat_message) that lets remote authenticated users execute arbitrary code via format specifiers in the message argument. This is a remote code execution risk with authenticati...