1017 matches found
PT-2014-1029 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions through 3.14.3 Description: The issue is related to errors in the implementation of access to shared resources in the Linux operating system. It allows for the exploitation of a race condition in the n tty write function...
PT-2010-1342 · Red Hat +1 · Red Hat +1
Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.18 on Red Hat Enterprise Linux RHEL 5 Description: The issue allows remote attackers to cause a denial of service deadlock via crafted packets that force collisions in the IPv4 routing hash table, triggering a routing...
PT-2008-3304 · Blogator · Blogator-Script
Name of the Vulnerable Software and Affected Versions: Blogator-script version 0.95 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id art parameter in the blogadata/include/sond result.php file. Recommendations: For Blogator-script versi...
PT-2007-4039 · Mpc Hc Team · Media Player Classic
Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...
PT-2006-3277 · Microsoft · Skype
Name of the Vulnerable Software and Affected Versions: Skype versions 2.0..104 through 2.5..78 Description: The issue is an argument injection vulnerability in the URI handler that allows remote authorized attackers to download arbitrary files via a crafted URL. This can lead to unauthorized...
PT-2006-2671 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MDPro versions prior to 1.076 Description: The issue allows remote attackers to obtain the full path of the server via a direct request to "includes/legacy.php". Recommendations: For versions prior to 1.076, consider restricting access...
Microsoft Windows XP named pipe fails to restrict anonymous access
Overview The Server service running on Microsoft Windows XP leaks authentication information. Description The Server service srvsvc.dll is a component of the Server Message Block SMB, and its follow-on, Common Internet File System CIFS. These are network protocols that Windows uses to share files...
Microsoft Outlook fails to properly filter parameters passed via "mailto:" URL
Overview A vulnerability in the way that Microsoft Outlook 2002 handles a certain type of hyperlink could allow a remote attacker to execute arbitrary code on the vulnerable system. Description Microsoft Outlook provides a centralized application for managing and organizing e-mail messages,...
SRT2003-06-12-1212 - FakeBO syslog() format string issue.
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
Microsoft Security Bulletin MS03-008: Flaw in Windows Script Engine Could Allow Code Execution (814078)
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Windows Script Engine Could Allow Code Execution 814078 Date: 19 March 2003 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Me Microsoft...
Microsoft Windows SQL Server allows arbitrary queries to be executed via "xp_displayparamstmt" extended procedure
Overview MS SQL Server contains an extended stored procedure with inappropriate permission settings. Description Microsoft SQL Server 7.0 and Microsoft SQL Server 2000 contain an extended stored procedure, xpdisplayparamstmt , that permits an unprivileged user of a database to gain administrative...
Bulk Data Services (BDS) vulnerability on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: Bulk Data Services BDS vulnerability Number: 20020804-01-P Date: August 12, 2002 Reference: CAN-2002-0632 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that under certain conditions,...
sudo vulnerable to heap corruption via -p parameter
Overview Sudo is susceptible to a locally exploitable heap overflow vulnerability. Description Sudo is a common utility used to allow a system administrator to give users or groups of users rights to run certain programs as root or as another user. A locally exploitable heap overflow can lead to...
iis.asp.overflow.txt
Windows 2000 and NT4 IIS .ASP Remote Buffer Overflow Release Date: 00/00/2002 Severity: High Remote code execution IWAMMACHINE Privilege Level Systems Affected: Microsoft Windows NT 4.0 Internet Information Services 4.0 Microsoft Windows 2000 Internet Information Services 5.0 Description: A...
Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly
Overview There is a problem in the NM Debug facility of MPE/iX that allows users to gain unauthorized privileges. Description The problem affects HP3000 systems running MPE/iX versions 5.5 through 6.5. HP has published a security bulletin describing the solution to this vulnerability...
Wang/Kodak Image Admin ActiveX Control
Overview Description The Image Admin control is incorrectly marked safe for scripting. This control is sometimes identified as from "Kodak" and other times as from "Wang". The Image Admin control is one of several controls used to provide image editting services through a web site. Because the...
