Sun Solaris passwd priviledge escalation

No description provided...

Microsoft ListBox/ComboBox Control - 'User32.dll' Buffer Overrun

source: https://www.securityfocus.com/bid/8827/info Microsoft has reported the existence of a local buffer overrun vulnerability in an undisclosed User32.dll library function. This function is used by applications implementing the use of ListBox or ComboBox controls and will be triggered when the...

SA-20031006 slocate buffer overflow - exploitation proof

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ====================================================================== Security advisory 20031006 - Appendix A proof of concept - ---------------------------------------------------------------------- Product: slocate Vulnerability type: buffer overfl...

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access source: https://www.securityfocus.com/bid/8502/info An SQL injection vulnerability has been reported in Attila PHP that could allow an attacker to gain unauthorized privileged access to a target site. This could be accomplished by...

Attila PHP 3.0 - SQL Injection Unauthorized Privileged Access

source: https://www.securityfocus.com/bid/8502/info An SQL injection vulnerability has been reported in Attila PHP that could allow an attacker to gain unauthorized privileged access to a target site. This could be accomplished by requesting a URI including parameters designed to influence the...

IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities (1)

IBM Informix Dynamic Server 9.40Informix Extended Parallel Server 8.40 - Multiple Vulnerabilities 1 source: https://www.securityfocus.com/bid/9512/info IBM Informix Dynamic Server and IBM Informix Extended Parallel Server have been reported prone to multiple vulnerabilities. The first issue exist...

DSA-336 linux-kernel-2.2.20 - several vulnerabilities

Bulletin has no description...

Various Axis products allow unauthorized remote privileged access

Overview A vulnerability in various Axis Communications products may allow unauthorized remote privileged access. Description Axis Communications Inc. produces network-enabled cameras and video servers. The company describes itself as "an innovative market leader in network video and print server...

HP-UX "rexec" command vulnerable to buffer overflow when supplied overly long command line argument to "-l" option

Overview A buffer overflow vulnerability in the rexec program supplied in some versions of the HP-UX operating system could allow local users to gain privileged access. Description The rexec program allows local users to execute commands on remote servers. rexec calls the rexec subroutine to act ...

PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Poptop...

Samba 2.2.x - 'nttrans' Remote Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Samba nttran...

CVE-2002-0575

OpenSSH CVE-2002-0575 describes a buffer overflow in OpenSSH up to 2.9.8 and in the 3.x line up to 3.2.0 (with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled). This allows remote and local authenticated users to gain privileges. Root cause: insecure handling of memory lead...

Half-Life StatsMe 2.6.x Plugin - CMD_ARGV Buffer Overflow

// source: https://www.securityfocus.com/bid/6575/info // The Half-Life StatsMe plug-in is prone to an exploitable buffer overflow condition. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context of...

Half-Life StatsMe 2.6.x Plugin - MakeStats Format String

// source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context o...

[SECURITY] [DSA 222-1] New xpdf packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 222-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2003 http://www.debian.org/security/faq -...

CVE-2002-2054

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the validlevel cookie to admin...

RealServer 7-9 - Describe Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'msf/core/exploit/http'...

RealServer 7-9 Describe Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

ASI Sybase Security Alert: Buffer overflow in xp_freedll

Sybase Adaptive Server buffer overflow in xpfreedll extended stored procedure http://www.appsecinc.com/resources/alerts/sybase/02-0003.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level:...

Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Issued on: July 22, 2002 Software: PHP versions 4.2.0 and 4.2.1 Platforms: All The PHP Group has learned of a serious security vulnerability in PHP versions 4.2.0 and 4.2.1. An intruder may be able to execute arbitrary code with...