2500 matches found
SQL injection in BttlxeForum
Hi, SAUDIDEFACERZ reported an input validation vulnerability in the 'bttlxeForum' forum software earlier today. A remote user can gain full control over the application. You can see the original message from SAUDIDEFACERZ at: http://securitytracker.com/alerts/2003/Apr/1006632.html The vendor...
CVE-2001-1359
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...
CVE-2001-1359: Undefined Security Weakness
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...
Sendmail 8.12.x - Header Processing Buffer Overflow (2)
Sendmail 8.12.x - Header Processing Buffer Overflow 2 // source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers...
Sendmail 8.12.x - Header Processing Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this vulnerability may be locally...
Half Life clanmod format string bug
Formst string bug in cmlog command requires rcon access...
Quake II Server performs console variable expansion on client-supplied input values
Overview The Quake II Server contains an information leakage vulnerability that allows remote attackers to gain control of the game server process. Description The Quake II Server responds to console commands from Quake II clients to perform a variety of game and server management functions. Both...
Unauthorized remote control access to systems running Funk Softwa re's Proxy v3.x
BindView Security Advisory -------- Unauthorized remote control access to systems running Funk Software's Proxy v3.x Issue Date: April 8, 2002 Contact: Chris Coffin [email protected] CVE: CAN-2002-0064, CAN-2002-0065, CAN-2002-0066 Overview: Funk Software's Proxy v3.x Remote Control...
CVE-1999-1414
Technical details for CVE-1999-1414 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-1999-1414
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges...
CVE-1999-1414: Undefined Security Weakness
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges...
BadBlue XSS vulnerabilities / Filesharing Server Worm
Strumpf Noir Society Advisories ! Public release ! -- -= BadBlue XSS vulnerabilities / Filesharing Server Worm =- Release date: Tuesday, February 26, 2002 Introduction: BadBlue is the technology behind Working Resources Inc.'s product line with the same name and which, amongst other things, also...
Addendum Re: Internet Explorer Pop-Up OBJECT Tag Bug
Pop-Up Bug Notes First, adding an addendum about the bug which Dave Ahmad discovered: This can be used with the window object as well, when setting the document body's innerHTML property and using method "window.open". This information has been forwarded to the vendor. Secondly, there are a numbe...
CVE-2001-1359
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...
Fw: [net-com] Bug in Mirc v5.82
----- Original Message ----- From: Trax [email protected] To: opers-xnet [email protected] Cc: net-com-xnet [email protected] Sent: Sunday, April 22, 2001 1:40 PM Subject: net-com Bug in Mirc v5.82 There is a bug in mirc v5.82 that allows remote control of clients via /quote and /ctcp not the ctcp...
CFINGERD remote vulnerability
Hi Following the recent habits, I break the advisory into 4 parts: OVERVIEW: --------- There is a critical bug in cfingerd daemon = 1.4.3, a classic format bug that makes possible to acquire full control over the remote machine if it runs the cfingerd program, the configurable and secure finger...
CVE-2001-0285
The CVE-2001-0285 issue affects the A1 HTTP server 1.0a, where a buffer overflow is triggered by a long HTTP request. This vulnerability could allow remote attackers to cause a denial of service and potentially execute arbitrary commands. The provided documents identify the vulnerable component a...
ISC BIND 8.2.x - TSIG Remote Stack Overflow (2)
ISC BIND 8.2.x - TSIG Remote Stack Overflow 2 / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Slackware 4.0/RedHat 6.2 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleak" bug through UDP ...
CVE-2000-0100
The CVE-2000-0100 entry concerns the SMS Remote Control program, which is installed with insecure permissions that let local users gain privileges by modifying or replacing the program. The NVD entry assigns a CVSS v2.0 base score of 7.2 (HIGH) with LOCAL attack vector, low attack complexity, and...