3761 matches found
Mollensoft Lightweight FTP Server 3.6 - Remote Denial of Service
Mollensoft Lightweight FTP Server 3.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability...
Multiple Vendor TCP Sequence Number Approximation Vulnerability
Description A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to more easily approximate TCP sequence numbers. The problem is that affected...
HP Web Jetadmin 7.5.2456 - Printer Firmware Update Script Arbitrary File Upload
source: https://www.securityfocus.com/bid/9971/info HP Web Jetadmin is prone to an issue which may permit remote users to upload arbitrary files to the management server. This issue exists in the printer firmware update script. Given the ability to place arbitrary files on the server to an...
Multiple Vendor - TCP Sequence Number Approximation (1)
// source: https://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to more easily approximate TCP...
Squid Proxy 2.42.5 - NULL URL Character Unauthorized Access
Squid Proxy 2.42.5 - NULL URL Character Unauthorized Access source: https://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to...
Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access
source: https://www.securityfocus.com/bid/9778/info It has been reported that Squid Proxy may be prone to an unauthorized access vulnerability that may allow remote users to bypass access controls resulting in unauthorized access to attacker-specified resources. The vulnerability presents itself...
CVE-2003-1022
Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory...
CVE-2003-1327
Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAILADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow wh...
CVE-2003-1340
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via 1 a uid user cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid admin cookie to the WebLinks module in ...
CVE-2003-1470
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service crash and execute arbitrary code via a CREATE command with a long mailbox name...
Apache 1.3.*-2.0.48 mod_userdir Remote Users Disclosure Exploit
Exploit for linux platform in category remote exploits =============================================================== Apache 1.3.-2.0.48 moduserdir Remote Users Disclosure Exploit =============================================================== / m00-apache-w00t.c Apache 1.3.-2.0.48 remote users...
Apache 1.3.x < 2.0.48 mod_userdir - Remote Users Disclosure
/ m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default configuration of moduserdir default apache module. Then attemp...
Morpheus discloses username to remote users
Overview The usernames disclosed by the Morpheus peer-to-peer file sharing application do not present a security vulnerability. Description Morpheus is a peer-to-peer file sharing application that allows users to search for and download files from other Morpheus users. This product allegedly...
Dansie Shopping Cart Discloses Installation Path to Remote Users
Indonesia Security Development Team Advisory Dansie Shopping Cart Discloses Installation Path to Remote Users ================================================================ Advisory Name: Dansie Shopping Cart Discloses Installation Path to Remote Users Release Date: 5:21 AM 10/20/03 Application...
Minihttpserver File-Sharing for NET Directory Traversal Vulnerability
Minihttpserver File-Sharing for NET Directory Traversal Vulnerability Affected Systems: File-Sharing for NET version: 1.5 and possibly earlier versions Vendor: Minihttpserver - http://www.minihttpserver.net Issue: Directory Traversal Vulnerability Released: 2 October 2003 Introduction:...
Sun Solstice AdminSuite ships with insecure default configuration
Overview The sadmind service provided on many Solaris and SunOS systems ships with an insecure default configuration that allows remote users to execute arbitrary commands with superuser root privileges. Description The Sun Microsystems Solstice AdminSuite is a graphical tool that allows Solaris...
[SECURITY] [DSA-332-1] New Linux 2.4.17 source code and MIPS kernel images fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 332-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 27th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0307
Poster version.two allows remote authenticated users to gain administrative privileges by appending the "|" field separator and an "admin" value into the email address field...
OpenSSH/PAM <= 3.6.1p1 Remote Users Discovery Tool
Exploit for linux platform in category remote exploits ================================================== OpenSSH/PAM Proof of concept code by Maurizio Agazzini Tested against Red Hat, Mandrake, and Debian GNU/Linux. Reference: http://lab.mediaservice.net/advisory/2003-01-openssh.txt $ tar xvfz...
OpenSSH/PAM <= 3.6.1p1 Remote Users Discovery Tool
No description provided by source. / SSHBRUTE - OpenSSH/PAM = 3.6.1p1 remote users discovery tool Copyright c 2003 @ Mediaservice.net Srl. All rights reserved Vulnerability discovered by Marco Ivaldi [email protected] Proof of concept code by Maurizio Agazzini [email protected] Tested...