Apache Httpd < 2.0.59 : mod_rewrite off-by-one error

An off-by-one flaw exists in the Rewrite module, modrewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely...

Apache Httpd < 1.3.37 : mod_rewrite off-by-one error

An off-by-one flaw exists in the Rewrite module, modrewrite. Depending on the manner in which Apache httpd was compiled, this software defect may result in a vulnerability which, in combination with certain types of Rewrite rules in the web server configuration files, could be triggered remotely...

CVE-2006-3630

CVE-2006-3630 concerns off-by-one errors in Wireshark/Ethereal dissectors (NCP NMAS and NDPS) affecting versions 0.9.7 through 0.99.0. Connected sources corroborate existence of multiple Ethernet dissector flaws in Wireshark/Ethereal history, including off-by-one issues in NCP NMAS/NDPS, and note...

CVE-2006-3630

Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...

CVE-2006-3630

Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...

CentOS 4 : curl (CESA-2005:875)

Updated curl packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of th...

security flaw

PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by...

CVE-2006-3145

Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error...

CVE-2006-3145

Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error...

CVE-2006-3145

Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error...

PT-2006-3760 · Squirrelmail +1 · Squirrelmail +1

Name of the Vulnerable Software and Affected Versions: SquirrelMail versions 1.4.6 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter, under specific conditions where register globals is enabled and magic quotes gpc is...

DSA-1089-1 freeradius - several vulnerabilities

Bulletin has no description...

Squirrelmail local file inclusion

Squirrelmail local file inclusion bug in functions/plugin.php . Tested on the latest 1.4.x version. No authentication needed. if isset$plugins && isarray$plugins foreach $plugins as $name useplugin$name; ... function useplugin $name if fileexistsSMPATH . "plugins/$name/setup.php" includeonceSMPAT...

phpListPro 2.0.1 - 'Language' Remote Code Execution

!/usr/bin/perl Title: phpListPro = 2.0.1 Remote Command Execution Exploit URL: http://www.smartisoft.com/ Info: - arbitrary local inclusion - need magicquotesgpc=off use IO::Socket; use LWP::Simple; ripped from rgod @apache= "/var/log/httpd/accesslog%00", "/var/log/httpd/errorlog%00",...

FreeBSD : apache -- Certificate Revocation List (CRL) off-by-one vulnerability (e936d612-253f-11da-bc01-000e0c2e438a)

Marc Stern reports an off-by-one vulnerability in within modssl. The vulnerability lies in modssl's Certificate Revocation List CRL. If Apache is configured to use a CRL this could allow an attacker to crash a child process causing a Denial of Service. %NASLMINLEVEL 70300 C Tenable Network...

ChipmunkBoard Multiple Attack vectors

ChipmunkBoard Multiple Attack vectors Discovered by: Nomenumbra Date: 6/4/2006 impact:high privilege escalation,possible defacement It is possible to insert the following javascript in the BBcode or supply it as your avatar url: javascript:alert27xss27; Also ChipmunkBoard is prone to SQL-injectio...

security flaw

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1932

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1932

Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors...

CVE-2006-1932

CVE-2006-1932 (and related CVEs 1933–1940) affect Ethereal up to version 0.10.14, via multiple dissectors and the OID printing routine, causing off-by-one errors, infinite loops, buffer overruns, crashes or aborts. Public advisories (Debian DSA-1049-1, RHSA-2006:0420, Gentoo GLSA 200604-17, OpenV...