CVE-2007-1772

CVE-2007-1772 affects HP JetDirect print servers’ built‑in FTP server. The issue allows a remote attacker to trigger a denial of service (engine crash) by sending a RETR command with a long pathname, indicating a potential buffer condition in LIST/ NLIST/ RETR handling. HP’s advisories recommend ...

CVE-2007-1772: Undefined Security Weakness

The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service engine crash via a RETR command with a long pathname...

hp-dos.txt

Vulnerability : Remote DOS HP JetDirect Print Servers Product : HP JetDirect Print Servers "HP LaserJet Series" By: Handrix 26 March 2007 MorX security research team www.morx.org +-------------+ | Description :-------------------------------------------------------------------------------...

HP Jetdirect FTP Print Server RERT命令拒绝服务漏洞

HP Jetdirect Print Server是一款打印服务器。 HP Jetdirect FTP Print Server处理RERT命令存在边界条件错误，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 提交超长字符串作为-p参数，可导致触发缓冲区溢出。精心构建提交数据可能以应用程序进程权限执行任意指令。 HP FTP Print Server 2.4 目前没有详细解决方案提供： http://www.hp.com/ python /usr/lib/python2.4/ftplib.py -d vulnerable host -l -p python -c 'print...

PHP-revista 1.1.2 - Multiple SQL Injections

php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits : ==============================================================================...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

Information disclosure

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

CVE-2007-1341: Undefined Security Weakness

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

tcpdump - Print-bgp.C Remote Integer Underflow

// source: https://www.securityfocus.com/bid/24965/info The 'tcpdump' utility is prone to an integer-underflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

Microsoft Windows spoolss GetPrinterData Denial of Service (CVE-2006-6296)

Windows Print Spooler Service SPOOLSS is a Windows service responsible for print queuing. A specially crafted RPC request could cause the spooler to consume all available memory on the Windows machine, and thus cause a denial of service...

CVE-2007-0909: Undefined Security Weakness

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

GGCMS <= v1.1.0 RC1 Remote Auto Deface Exploit / Remote Code Execution Exploit

No description provided by source. ? // //Kacper & str0ke Settings $exploitname = "GGCMS = v1.1.0 RC1 Remote Auto Deface Exploit / Remote Code Execution Exploit"; $scriptname = "GGCMS v1.1.0 RC1"; $scriptsite = "http://ggcms.weblance.pl/"; $dork = '"Powered by GGCMS"'; // print ' :::::::::...

CVE-2007-0803

Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to 1 "print floats" and 2 a missing null termination in the "rope constructor."...

CVE-2007-0803

Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to 1 "print floats" and 2 a missing null termination in the "rope constructor."...

Buffer overflow

Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to 1 "print floats" and 2 a missing null termination in the "rope constructor."...

CVE-2007-0803

Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to 1 "print floats" and 2 a missing null termination in the "rope constructor."...