666 matches found
Sql injection
DISPUTED Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL...
CVE-2006-0669
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database...
CVE-2005-4621
Cross-site scripting XSS vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg...
[SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory DSA 736-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 738-1] New razor packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
CVE-2002-1973
Buffer overflow in CHttpServer::OnParseError in the ISAPI extension Isapi.cpp when built using Microsoft Foundation Class MFC static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service access violati...
CVE-2002-1973
The CVE-2002-1973 entry describes a buffer overflow in CHttpServer::OnParseError of the ISAPI extension (Isapi.cpp) when built with MFC static libraries in Visual C++ 5.0 and 6.0 before SP3. This flaw, present in multiple products (including BadBlue), can be triggered by a long query string that ...
CVE-2004-2011
msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service crash via a single & ampersand in a link, which triggers a parsing error, possibly due to missing portions of the URI...
CVE-2004-1410
Cross-site scripting XSS vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229...
CVE-2004-2011
msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service crash via a single & ampersand in a link, which triggers a parsing error, possibly due to missing portions of the URI...
CVE-2004-1410
Cross-site scripting XSS vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229...
WPkontakt.txt
Product: WPKontakt , Jaroslaw Sajko Advisory: http://www.man.poznan.pl/security/wpkontakt.html ISSUE WPkontakt is the another Polish instant messenger. The problem is similiar to the problems revealed in GG or Tlen.pl - parsing error leading to the remote script execution. DETAILS Parsing error...
Archive::Zip may not properly parse the file sizes of Zip archives
Overview Archive::Zip does not properly parse Zip files and may incorrectly interpret malformed zip archives to contain zero length/size files. As a a result, anti-virus software using Archive::Zip may fail to detect malicious content within a Zip archive. Description The Archive::Zip module allo...
Mandrake Linux Security Advisory : squid (MDKSA-2004:112)
iDEFENSE discovered a Denial of Service vulnerability in squid version 2.5.STABLE6 and previous. The problem is due to an ASN1 parsing error where certain header length combinations can slip through the validations performed by the ASN1 parser, leading to the server assuming there is heap...
[Full-Disclosure] iDEFENSE Security Advisory 10.11.04: Squid Web Proxy Cache Remote Denial of Service Vulnerability
Squid Web Proxy Cache Remote Denial of Service Vulnerability iDEFENSE Security Advisory 10.11.04: www.idefense.com/application/poi/display?id=152&type=vulnerabilities October 11, 2004 I. BACKGROUND Squid Web Proxy Cache is a full-featured web proxy cache designed to run on Unix systems. It suppor...
WS_FTP Server Path Parsing Remote DoS
According to its banner, the version of WSFTP on the remote host is vulnerable to a remote denial of service. There is an error in the parsing of file paths. Exploitation of this flaw may cause a vulnerable system to use a large amount of CPU resources. C Tenable Network Security, Inc...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (2)
Vixie Cron crontab 3.0 - Privilege Lowering Failure 2 source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab...
Vixie Cron crontab 3.0 - Privilege Lowering Failure (1)
source: https://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop privileges correctly for subsequent...