10093 matches found
viewcvs -- information leakage
The hidecvsroot and forbidden configuration options are not properly honored by viewcvs when exporting to a tar file which can lead to information leakage...
atari800 - Local Privilege Escalation
/ Exploit for atari800 by pi3 pi3ki31ny pi3@pi3:$ ./p ...::: -= exploit for Atari800 by pi3 pi3ki31ny =- :::... Ussage: + ./p options -? -v choose a bug: 1 - first bug in all versions Atari800 2 - second bug in older Atari800 - modiy argv0 3 - third bug in config file - OS/AROM 4 - fourth bug in...
Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities
Kerio Personal Firewall 4.1.1 - Multiple IP Options Denial of Service Vulnerabilities / HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye:...
Kerio Firewall DoS
Problem with IP options processing allow to crash firewall with single packet...
CVE-2004-1625
pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown...
PT-2004-2532 · Pgina · Pgina
Name of the Vulnerable Software and Affected Versions: pGina versions 1.7.6 and possibly older Description: The issue allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown when the Restart or Shutdown options are enabled on the logi...
Microsoft Internet Explorer does not properly handle cached HTTPS contents
Overview Microsoft Internet Explorer fails to properly validate cached HTTPS contents, allowing an attacker to obtain information or spoof information on a secure web site. Description The HTTPS protocol is used to provide authentication, encryption, integrity, and non-repudiation services to web...
GLSA-200410-08 : ncompress: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200410-08 ncompress: Buffer overflow compress and uncompress do not properly check bounds on command line options, including the filename. Large parameters would trigger a buffer overflow. Impact : By supplying a carefully crafted...
Debian DSA-377-1 : wu-ftpd - insecure program execution
wu-ftpd, an FTP server, implements a feature whereby multiple files can be fetched in the form of a dynamically constructed archive file, such as a tar archive. The names of the files to be included are passed as command line arguments to tar, without protection against them being interpreted as...
Mozilla allows signed scripts calling "enablePrivilege" to change contents of a "grant" dialog
Overview A vulnerability in the way Mozilla and its derived programs display dialogs in some circumstances could allow a remote attacker to install and run software on a vulnerable system. Description The Mozilla web browser and related Mozilla products support the ability to run signed scripts...
Inkra 1504GX DoS
Invalid IP options handling...
GLSA-200409-08 : Ruby: CGI::Session creates files insecurely
The remote host is affected by the vulnerability described in GLSA-200409-08 Ruby: CGI::Session creates files insecurely The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Session instance to be written to a file, writes t...
amap (NASL wrapper)
This plugin runs amap to find open ports and identify applications on the remote host. See the section 'plugins options' to configure it. TRUSTED...
CVE-2003-0125: Undefined Security Weakness
Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service reboot and execute arbitrary code via a long GET /OPTIONS value...
GLSA-200402-05 : phpMyAdmin < 2.5.6-rc1: possible attack against export.php
The remote host is affected by the vulnerability described in GLSA-200402-05 phpMyAdmin 2.5.6-rc1: possible attack against export.php One component of the phpMyAdmin software package export.php does not properly verify input that is passed to it from a remote user. Since the input is used to...
GLSA-200407-18 : mod_ssl: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200407-18 modssl: Format string vulnerability A bug in sslengineext.c makes modssl vulnerable to a ssllog related format string vulnerability in the modproxy hook functions. Impact : Given the right server configuration, an attack...
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
qpopper Options File Buffer Overflow
Binary data 1789.prm...
CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...