6393 matches found
CVE-2001-0636
Buffer overflows in Raytheon SilentRunner allow remote attackers to 1 cause a denial of service in the collector cle.exe component of SilentRunner 2.0 via traffic containing long passwords, or 2 execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2....
Microsoft Index Server 2.0 - File Information Full Path Disclosure
Microsoft Index Server 2.0 - File Information Full Path Disclosure source: https://www.securityfocus.com/bid/3339/info The sqlqhit.asp sample file is used for performing web-based SQL queries. Malicious users could send specifically crafted HTTP request to an Internet Information Services server...
CVE-2001-1090
nsspostgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request...
LDAP NULL BASE Search Access
The remote LDAP server supports search requests with a NULL, or empty, base object. This allows information to be retrieved without any prior knowledge of the directory structure. Coupled with a NULL BIND, an anonymous user may be able to query your LDAP server using a tool such as 'LdapMiner'...
phpBB 1.4.0 bug leads to easy admin privileges
-New phpBB 1.4.x exploit phpBB, is an open source bulletin board created by the phpBB group. Version 1.4.x of phpBB has a variable input validation problem that can lead to limited arbitrary sql querys including gaining administrative access to the board. The problem lies in the fact that phpBB...
ID Software Quake 3 - 'SMURF' Denial of Service
// source: https://www.securityfocus.com/bid/3060/info Quake 3 network play features contain a remotely exploitable denial of service vulnerability. A hostile client program can be used by to generate a large number of forged client queries on behalf of a target user. The server's responses flood...
Microsoft SQL Server Administrator Cached Connection Vulnerability
Description Due to a flaw in the handling of specially crafted ad hoc queries, it is possible for a logged in user to utilize the ad hoc query in such a way that the use of the system administrator's cached connection would be invoked rather than that of the user. This would enable the user to...
Trend Micro Interscan VirusWall for Windows NT 3.4/3.5/3.51 - Remote Reconfiguration
source: https://www.securityfocus.com/bid/2808/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and outgoing traffic via SMTP, FTP, and HTTP at the gateway of the network. The...
CVE-2001-0319
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the orderrn option of the report capability...
CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed userusername parameter...
NCM Content Management System - content.pl Input Validation
NCM Content Management System - content.pl Input Validation source: https://www.securityfocus.com/bid/2584/info The NCM Content Management System is a product distributed by NCM. The NCM Content Management System is designed to manage web material and other data, and provide an interface to...
NCM Content Management System - content.pl Input Validation
source: https://www.securityfocus.com/bid/2584/info The NCM Content Management System is a product distributed by NCM. The NCM Content Management System is designed to manage web material and other data, and provide an interface to databases from web resources. A problem with the Content Manageme...
CVE-2001-0201
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program...
IBM Net.Commerce 2.03.x4.x - orderdspc.d2w order_rn Option SQL Injection
IBM Net.Commerce 2.03.x4.x - orderdspc.d2w orderrn Option SQL Injection source: https://www.securityfocus.com/bid/2350/info IBM's Net.Commerce ecommerce platform supports macros which, by default, do not properly validate requests in user-supplied input. A thoughtfully-formed request to a...
Microsoft Indexing Service (Windows 2000) - File Verification
Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or distribute parts of it without...
ezboard-scx-sa-03.txt
============================================================================= Securax-SA-03 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Ezboard ver. 5.3.9 can be caused unreachable. Announced: 2000-05-24...
CVE-2000-0325
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability...
CVE-1999-0797
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...
ISC BIND 4.9.7/8.x - Traffic Amplification and NS Route Discovery
source: https://www.securityfocus.com/bid/983/info ISC BIND 4.9.7/8.1/8.1.1/8.1.2/8.2/8.2.1/8.2.2 Traffic Amplification and NS Route Discovery Vulnerability A potential denial of service hence forth referred to as DoS attack exists in the default configuration of many popular DNS servers. If a...