7891 matches found
CVE-2007-6735: Undefined Security Weakness
NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session...
BigAnt Server v2.52 Remote Buffer Overflow Exploit 2
No description provided by source. !/usr/bin/python BigAnt Server 2.52 remote buffer overflow exploit 2 Author: DouBleZer0 Vulnerability discovered by Lincoln a another version of the original exploit by Lincoln application is little hazy.. import sys,socket host = sys.argv1 buffer= "\x90" 20...
DEBIAN-CVE-2009-4128
GNU GRand Unified Bootloader GRUB 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1...
Slowloris Denial of Service Attack
Slowloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the target web server and sending a partial request. Periodically, it will send subsequent HTTP headers, adding to-but never completing-the...
PT-2009-4245 · Ulteo · Ulteo Open Virtual Desktop
Name of the Vulnerable Software and Affected Versions: Ulteo Open Virtual Desktop version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several API endpoints, including...
CVE-2009-1332
The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...
Design/Logic Flaw
The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...
CVE-2009-0842
mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink...
Partial disclosure: Was it a cat I saw?
Quite often in our industry, two or five people can look at the same problem from different angles, and see radically different things. Rare is the situation that reads the same to everyone, forwards and backwards. It’s all about perspective. In my appearance on the ‘Partial Disclosure Dilemma’...
No consensus yet on partial disclosure
Five of the brighter minds in the security industry spent two hours Thursday afternoon arguing, needling each other and generally disagreeing about everything under the sun and at the end of it all settled absolutely nothing on the topic of partial disclosure. The panel was meant to generate some...
Denial of Service using Partial GET Request in Mozilla Firefox 3.06
No description provided by source. [email protected] wrote: It's been confirmed that this is not problem in IE. Sorry I didn't mention that. \ Microsoft uses Silverlight: GET /index.php?page=Poem/Poem.php HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, ...
Denial of Service using Partial GET Request in Mozilla Firefox 3.06
============================================================ !vuln Mozilla Firefox 3.06 Previous versions may also be affected. ============================================================ ============================================================ !risk Medium There are currently many users usi...
CVE-2008-2316: Undefined Security Weakness
Integer overflow in hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."...
php htmlentities/htmlspecialchars multibyte sequences
The 1 htmlentities and 2 htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465...
php htmlentities/htmlspecialchars multibyte sequences
The 1 htmlentities and 2 htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465...
CVE-2008-2953
Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...
CVE-2008-2953
Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...
CVE-2008-2953
Removed by vendor...
faname10-sql.txt
netVigilance Security Advisory 42 Fa Name version 1.0 SQL Injection Vulnerability Description: Fa Name http://webscripts.softpedia.com/script/Content-Management/Fa-Name-41229.html is useful portal CMS for .name websites. You can have a simple portal but useful one for you domain names and by usei...
CVE-2008-2953: Improper Input Validation
Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...