Cisco NTP ntpd readvar Variable Remote Overflow (CSCdt93866)

By sending a crafted NTP control packet, it is possible to trigger a buffer overflow in the NTP daemon. This vulnerability can be exploited remotely. The successful exploitation may cause arbitrary code to be executed on the target machine. This vulnerability is documented as Cisco Bug ID...

XMB cross-scripting vulnerability

XMB is a php-based forum. This product contain a Cross Site Scripting vulnerability that allows attackers to insert JavaScript code and other HTML code into existing messages, bypassing the internal JavaScript/HTML code stripper. Exploit: imgjavasCript:alert'Hello world.'/img Vulnerable systems:...

bugtraq submission

All versions of the C version of ePerl 2.2 up to current version 2.2.14 http://www.engelschall.com/sw/eperl/ Severity: Low Systems Affected: Unix systems Description: ePerl allows the user to embed perl code specified inside ePerl delimiters in HTML. ePerl has the ability to "safely" include...

possible rcp hole...

Here is a possible bug in rcp; since I think it calls system. I haven't had much time to play with this, because exama are coming up. It is negated because system calls /bin/cp which with the newer versions of bash, it drops it's effective credientals... $ ls -alF which rcp -rwsr-xr-x 1 root root...

CVE-1999-0352

CVE-1999-0352 affects ControlIT 4.5 and earlier, with weak password encryption as the root cause. Multiple connected sources corroborate the same description. The vulnerability concerns credential protection rather than an explicit code path described in detail in the provided documents. Impact i...

CVE-2018-4826

...

PT-2005-5547 · Debian +4 · Kernel-Source-2.4.27 +15

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux kernel-image-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-headers-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux kernel-pcmcia-modules-2.4.27 versions 2.4.27 through 2.4.27-2 Debian GNU/Linux...