Lucene search
+L

527 matches found

Exploit DB
Exploit DB
•added 2003/03/10 12:00 a.m.•40 views

Qpopper 4.0.x - Remote Memory Corruption

// source: https://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a target buffer with a malicious macro nam...

10CVSS5.8AI score0.08604EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2002/12/11 12:00 a.m.•16 views

PT-2002-2273 · Cyrus · Cyrus Sasl Library

Name of the Vulnerable Software and Affected Versions: Cyrus SASL library versions 2.1.9 and earlier Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via multiple buffer overflows. These overflows can occur due to long inputs during...

9.8CVSS7.9AI score0.07078EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/08/31 12:00 a.m.•4 views

CVE-2001-1389: Undefined Security Weakness

Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination...

7.5CVSS6.3AI score0.0334EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2001/12/12 12:00 a.m.•55 views

Security Update: [CSSA-2001-SCO.39] Open UNIX, UnixWare 7: timed does not enforce nulls

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX, UnixWare 7: timed does not enforce nulls Advisory number: CSSA-2001-SCO.39 Issue date: 2001 December 10 Cross reference: 1. Problem Description The...

10CVSS6.1AI score0.02749EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/10/13 12:00 a.m.•6 views

CVE-2000-0549: Undefined Security Weakness

Kerberos 4 KDC program does not properly check for null termination of AUTHMSGKDCREQUEST requests, which allows remote attackers to cause a denial of service via a malformed request...

5CVSS5.7AI score0.02284EPSS
SaveExploits1References1
NVD
NVD
•added 2000/06/09 4:00 a.m.•30 views

CVE-2000-0549

Kerberos 4 KDC program does not properly check for null termination of AUTHMSGKDCREQUEST requests, which allows remote attackers to cause a denial of service via a malformed request...

5CVSS6.7AI score0.02284EPSS
SaveExploits1References5
exploitpack
exploitpack
•added 2000/02/08 12:00 a.m.•30 views

Zeus Web Server 3.x - Null Terminated Strings

Zeus Web Server 3.x - Null Terminated Strings source: https://www.securityfocus.com/bid/977/info Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in...

7.4AI score
SaveExploits0
Rows per page
Query Builder