3599 matches found
CVE-2004-1224
Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...
CVE-2004-2185
Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...
CVE-2004-2185
Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...
DEBIAN-CVE-2004-2152
Cross-site scripting XSS vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML...
DEBIAN-CVE-2004-2185
Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...
CVE-2004-1224
Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...
CVE-2004-1224
The CVE-2004-1224 entry concerns an off-by-one in the mtr_curses_keyaction function affecting MTR versions 0.55–0.65. This flaw can allow local attackers to hijack raw sockets via the 's' keybinding, leaving a buffer without a NULL terminator. Affected products are multiple CVE trackers (NVD, OSV...
CVE-2004-1224
Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...
Debian DSA-124-1 : mtr - buffer overflow
The authors of mtr released a new upstream version, noting a non-exploitable buffer overflow in their ChangeLog. Przemyslaw Frasunek, however, found an easy way to exploit this bug, which allows an attacker to gain access to the raw socket, which makes IP spoofing and other malicious network...
AWStats 5.0 6.3 - logfile File Inclusion Command Execution
AWStats 5.0 6.3 - logfile File Inclusion Command Execution Example: http://target/awstats.pl?filterrawlog=&rawlogmaxlines=5000&config=stats.jdims.info&framename=main&pluginmode=rawlog&log file=/etc/passwd...
Unreal IRCD OperServ Raw Message Channel Join DoS
Binary data 2154.prm...
[Full-Disclosure] DoS in Webbsyte Chat 0.9.0
Donato Ferrante Application: Webbsyte Chat http://sourceforge.net/projects/wchat/ Version: 0.9.0 Bug: Denial Of Service Date: 02-Aug-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...
FirstClass Desktop 7.1 (latest) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================= FirstClass Desktop 7.1 latest Buffer Overflow Exploit ======================================================= / ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7...
[Hat-Squad] Remote buffer overflow in Mdaemon Raw message Handler
Hat-Squad Security Team Advisory http://www.hat-squad.com Product: Alt-N Technologies Mdaemon Mail Server Version: MDaemon 6.85 and Below to 6.52 Vulnerability: Remote buffer overflow in Raw Message Handler Release Date: 12/29/2003 Vendor Status: Informed on 29 Dec 2003 Quick response on 29 Dec...
MS Windows 2000 RSVP Server Authority Hijacking PoC Exploit
No description provided by source. // Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server Authority Hijacking // // A problem has been identified in the RSVP Server for Microsoft Windows 2000 that // may allow an attacker to hijack management of the network. This could allow an // attacke...
Cisco IOS - using hping Remote Denial of Service
!/bin/tcsh -f Remote DoS exploit against the recent Cisco IOS vuln. Cisco doc. 44020 Vulnerable versions - all Cisco devices running IOS. Requirements : tcsh, and hping. Get hping @ www.hping.org And you know the best part? This script actually works! Unlike the few .c's floating around the net...
Cisco IOS - using hping Remote Denial of Service
Cisco IOS - using hping Remote Denial of Service !/bin/tcsh -f Remote DoS exploit against the recent Cisco IOS vuln. Cisco doc. 44020 Vulnerable versions - all Cisco devices running IOS. Requirements : tcsh, and hping. Get hping @ www.hping.org And you know the best part? This script actually...
Cisco IOS (using hping) Remote Denial of Service Exploit
No description provided by source. !/bin/tcsh -f Remote DoS exploit against the recent Cisco IOS vuln. Cisco doc. 44020 Vulnerable versions - all Cisco devices running IOS. Requirements : tcsh, and hping. Get hping @ www.hping.org And you know the best part? This script actually works! Unlike the...
UnrealIRCd OperServ Raw Channel Join DoS
The remote host is running a version of ircd which may crash when it receives certain raw messages. An attacker could exploit this flaw to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11797; scriptversion "1.14"; scriptbugtraqid8131;...