5673 matches found
CVE-2003-0773
saned in sane-backends 1.0.7 and earlier does not check the IP address of the connecting host during the SANENETINIT RPC call, which allows remote attackers to use that call even if they are restricted in saned.conf...
CVE-2003-0775
saned in sane-backends 1.0.7 and earlier calls malloc with an arbitrary size value if a connection is dropped before the size value has been sent, which allows remote attackers to cause a denial of service memory consumption or crash...
Gordano Messaging Suite - Multiple Vulnerabilities
Release Date: 09/04/2003 TITLE ===== Gordano Messaging Suite – Multiple Vulnerabilities DESCRIPTION =========== “Gordano Messaging Suite is the powerful messaging server running on Windows, Linux, Solaris and AIX. It is being used by over twenty four thousand customers, in more than ninety...
FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure
source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...
CVE-2003-0468
Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate...
CVE-2001-1410
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering...
CVE-2003-0590
Cross-site scripting XSS vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon imagesubject field...
D-Link 704p Broadband Router Remote / Local DoS
02 August 2003 Hardware: D-Link 704p Vulnerability: Multiple Local/Remote see below Warning Level: Moderate Description: This small advisory is on the D-Link 704p router with firmware version 2.70. The router is a small 4 port DSL/CABLE router. Earlier this year I made a small post on BUGTRAQ abo...
[SECURITY] [DSA-365-1] New phpgroupware package fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 365-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 5th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0468
Summary of the CVE-2003-0468 family (Postfix) : The issue affects Postfix versions up to 1.1.11 (and variants discussed in 1.1.x line) and enables a remote attacker to perform bounce-scans or use the MTA as a DoS/DDoS tool by causing SMTP connections to target hosts via crafted addresses. Public ...
[SECURITY] [DSA-361-1] New kdelibs packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 361-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 1st, 2003 http://www.debian.org/security/faq -...
CVE-2003-0424
Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...
CVE-2001-1410
The connected CERT entry for CVE-2001-1410 documents that Internet Explorer window.createPopup() creates chromeless popup windows that can spoof the user interface, enabling phishing-style deception and potential interaction with local files. The vulnerability affects IE 6 and earlier and is miti...
CVE-2001-1410
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering...
CVE-2003-0521
Cross-site scripting XSS vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the 1 Error Log or 2 Latest Visitors screens...
Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (2)
source: https://www.securityfocus.com/bid/8159/info It has been reported that VP-ASP does not sufficiently sanitize user input passed to the shopexd.asp script contained in the software. As a result, it may be possible for remote attackers to embed SQL commands which are to be passed to the...
Moderate: Red Hat Security Advisory: ethereal security update
Updated Ethereal packages fixing a number of remotely exploitable security issues are now available. Ethereal is a package designed for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash or run arbitrary co...
CPanel 5.05.36.x - Admin Interface HTML Injection
CPanel 5.05.36.x - Admin Interface HTML Injection source: https://www.securityfocus.com/bid/8119/info cPanel is prone to an HTML injection vulnerability. It is possible for remote attacks to include hostile HTML and script code in requests to cPanel, which will be logged. When logs are viewed by ...
CPanel 5.0/5.3/6.x - Admin Interface HTML Injection
source: https://www.securityfocus.com/bid/8119/info cPanel is prone to an HTML injection vulnerability. It is possible for remote attacks to include hostile HTML and script code in requests to cPanel, which will be logged. When logs are viewed by an administrative user, the injected code could be...
CVE-2003-0478
Format string vulnerability in 1 Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including 2 digatech 1.2.1, 3 methane 0.1.1, 4 AndromedeIRCd 1.2.3-Release, and 5 ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute...