3922 matches found
[SST]ServU MDTM command remote buffero verflow adv
Serv-U Ftp Server Long Filename Stack Overflow Vunlnerablity Application: Serv-U Affected Versions: All versions prior 4.2 include 4.1.0.11 Vendor: RhinoSoft http://www.rhinosoft.com http://www.serv-u.com URL: http://www.0x557.org/release/servu.txt Vunlnerablity: An internal memory buffer may be...
Low: Red Hat Security Advisory: httpd security update
Updated httpd packages that fix two minor security issues in the Apache Web server are now available for Red Hat Enterprise Linux 3. The Apache HTTP Server is a powerful, full-featured, efficient, and freely-available Web server. An issue in the handling of regular expressions from configuration...
New CesarFTP v 0.99g DoS
just thought that, since you seemed interseted in the topic earlier, I would e-mail you this exploit. I don't think that it's going to get patched anytime soon anyways, so it doesn't matter. I haven't tested remotely network trouble but I would like to get some info back on your results. I can on...
Flash Player < 7.0.19.0 Predictable Data Location Weakness
The remote host is running a version of Flash Player older than 7.0.19.0. Such versions can be abused in conjunction with several flaws in the web browser to read local files on an affected system. To exploit this issue, an attacker would need to lure a user of the software into visiting a rogue...
Plaintext Vulnerability in Alan Ward Acart
Vulnerability: Plaintext Vulnerability Description: All of the data in this database is stored in plain text not encrypted, including usernames, passwords, credit card numbers, addresses, etc. Many times the database is placed into a web accessible folder by default Exploit: None Required Solutio...
XSS Vulnerabilities in Alan Ward Acart
Vulnerability: XSS Vulnerabilities in msg Description: XSS Cross Site Scripting vulnerabilities exist in the msg parameter passed in the URL to many pages. This can be used to run arbitrary code on the website, or redirect to some other malicious script. These pages include: deliver.asp error.asp...
Corsaire Security Advisory: PeopleSoft IScript XSS issue
-- Corsaire Security Advisory -- Title: PeopleSoft IScript XSS issue Date: 04.07.03 Application: PeopleTools 8.20/8.43 and prior Environment: Various Author: Glyn Geoghegan [email protected] Audience: General distribution Reference: c030704-004 -- Scope -- The aim of this document is to...
E107 DoS vulnerability
Program: E107 www.e107.org Versions: 0.545 & 0.603 tested, below may also be vulnerable Synopsis: Tagboard Denial of Service vulnerability system wide Security Risk: Medium It's a system wide DoS Author: Blademaster [email protected] www.hackingheaven.com URL:...
thttpd 2.2x - defang Remote Buffer Overflow
thttpd 2.2x - defang Remote Buffer Overflow // source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software...
Les Visiteurs Multiple Remote File Inclusion
The remote 'Les Visiteurs' PHP scripts are vulnerable to a bug wherein any anonymous user can force the server to redirect to any arbitrary IP and download a potentially malicious include file. This can allow an attacker to upload and execute malicious code on the web server. %NASLMINLEVEL 70300 ...
TCP/IP Ping of Death Remote DoS (jolt)
The remote host crashed when pinged with an incorrectly fragmented packet. This is known as the 'jolt' or 'ping of death' denial of service attack. A remote attacker could exploit this to repeatedly crash this server. C Tenable Network Security, Inc. include"compat.inc"; if description...
TinyWeb cgi-bin Crafted HTTP GET Request DoS
According to its banner, the remote version of TinyWeb has a denial of service vulnerability. Issuing a specially crafted GET request similar to : GET /cgi-bin/.%00./dddd.html can cause the server to consume large amounts of CPU time. Changes by Tenable: - Revised plugin title, output formatting,...
Important: Red Hat Security Advisory: : Updated MySQL packages fix vulnerability
Updated MySQL server packages fix a buffer overflow vulnerability. MySQL is a multi-user, multi-threaded SQL database server. Frank Denis reported a bug in unpatched versions of MySQL prior to version 3.23.58. Passwords for MySQL users are stored in the Password field of the user table. Under thi...
Microsoft IIS 404 Response Service Pack Signature
The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...
SRT2003-09-11-1200 - setgid man MANPL overflow
The full version of this advisory can be found at. http://www.secnetops.com/research/advisories/SRT2003-09-11-1200.txt Quick Summary: Advisory Number : SRT2003-09-11-1200 Product : Andries Brouwer man Version : Version =1.5m1 Vendor : ftp://ftp.win.tue.nl/pub/linux-local/utils/man Class : Local...
Dropbear SSH Server Username Remote Format String
The remote host is runnning Dropbear SSH. There is a format string vulnerability in all versions of the Dropbear SSH server up to and including version 0.34. An attacker may use this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc";...
Linux 2.4 NFSv3 knfsd Malformed GETATTR Request Remote DoS
The remote host is running knfsd, a kernel NFS daemon. There is a vulnerability in this version that may allow an attacker to cause a kernel panic on the remote host by sending a malformed GETATTR request with an invalid length field. C Tenable Network Security, Inc. include"compat.inc"; if...
Digi-news and Digi-ads version 1.1 admin access without password
Digi-news and Digi-ads version 1.1 admin access without password .oO Overview Oo. Digi-news and Digi-ads version 1.1 admin access without password Discovered on 2003, March, 30th Vendor: Digi-FX Digi-news 1.1 is a PHP news editor. It allows you to easily add, edit, and delete news. Digi-ad 1.1 is...
[Full-Disclosure] Trend Micro ActiveX Multiple Overflows
Systems affected: HouseCall Trend Micros Online virus scanning service and Damage Cleanup Server version 1.0 Some history: On 06/22/03 in the "Symantec ActiveX control buffer overflow" advisory i put the next at the bottom of it: --------------------------- Important note: I recomend antivirus...
