Pacific Software Carello 1.2.1 Shopping Cart - Command Execution

Pacific Software Carello 1.2.1 Shopping Cart - Command Execution source: https://www.securityfocus.com/bid/2729/info It is possible for a remote user to execute arbitrary commands on a host using Carello Shopping Cart software. A specially crafted HTTP request could cause inetinfo.exe to consume...

Hughes Technologies DSL_Vdns 1.0 - Denial of Service

Hughes Technologies DSLVdns 1.0 - Denial of Service source: https://www.securityfocus.com/bid/2700/info It is possible for a remote user to cause a denial of service on a host running DSLVdns. Submitting data to port 6070 and closing the connection before the request is fulfilled, will cause...

T. Hauck Jana Server 1.451.46 - Hex Encoded Directory Traversal

T. Hauck Jana Server 1.451.46 - Hex Encoded Directory Traversal source: https://www.securityfocus.com/bid/2703/info It is possible for a remote user to traverse the directories of a host running Jana Server. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal...

Hughes Technologies DSL_Vdns 1.0 - Denial of Service

source: https://www.securityfocus.com/bid/2700/info It is possible for a remote user to cause a denial of service on a host running DSLVdns. Submitting data to port 6070 and closing the connection before the request is fulfilled, will cause DSLVdns to enter a 'Default.Closed' state; therefore,...

T. Hauck Jana Server 1.45/1.46 - Hex Encoded Directory Traversal

source: https://www.securityfocus.com/bid/2703/info It is possible for a remote user to traverse the directories of a host running Jana Server. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal arbitrary directories. In addition to revealing directories, this...

SpyNet 6.5 Chat Server - Multiple Connection Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/2701/info Spynet Chat Server is a freely available client-server chat package by Spytech Software. Spynet Chat offers IRC style chat to users of the software package. A problem in the package could allow remote users to crash the chat server. Upon receivi...

BRS Webweaver 0.x - FTP Root Full Path Disclosure

BRS Webweaver 0.x - FTP Root Full Path Disclosure source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By...

BRS Webweaver 0.x - FTP Root Full Path Disclosure

source: https://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By submitting the FTP command CD argumented by an...

Vulnerability in WebXQ Server

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in WebXQ Server Overview WebXQ v2.1.204 is a web server available from http://www.datawizard.net. A vulnerability exists which allows a remote user to break out of the ftp root. Details The following URL demonstrates t...

IRIX 5.3/6.x - 'netprint' Arbitrary Shared Library Usage

// source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to specify the network type -n. This...

Perl Web Server 0.x - Directory Traversal

source: https://www.securityfocus.com/bid/2648/info Perl Web Server, an experimental cross-platform web server project, does not prevent a remote user from requesting documents outside the ServerRoot location of the virtual / directory. This means that if an attacker knows the location of a...

GoAhead Web Server 2.1 (Windows) - Denial of Service

GoAhead Web Server 2.1 Windows - Denial of Service source: https://www.securityfocus.com/bid/2607/info The GoAhead Web Server is a freely available, open source software package developed by GoAhead. The GoAhead Web Server offers a multi-platform web server and source code to the community. A...

GoAhead Web Server 2.1 (Windows) - Denial of Service

source: https://www.securityfocus.com/bid/2607/info The GoAhead Web Server is a freely available, open source software package developed by GoAhead. The GoAhead Web Server offers a multi-platform web server and source code to the community. A problem with the web server makes it possible to deny...

Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows

Trend Micro Interscan VirusWall Linux 3.0.1 - Multiple Program Buffer Overflows source: https://www.securityfocus.com/bid/2579/info Interscan Viruswall is a Virus scanning software package distributed and maintained by Trend Micro. It is designed to scan for virus occurances in both incoming and...

IBM WebsphereNet.Commerce 3 - CGI-BIN Macro Denial of Service

IBM WebsphereNet.Commerce 3 - CGI-BIN Macro Denial of Service source: https://www.securityfocus.com/bid/2588/info Net.Commerce is part of the Websphere platform of products distributed by IBM. Net.Commerce provides several versatile features to facilitate e-commerce, and features in performance a...

IBM Websphere/Net.Commerce 3 - CGI-BIN Macro Denial of Service

source: https://www.securityfocus.com/bid/2588/info Net.Commerce is part of the Websphere platform of products distributed by IBM. Net.Commerce provides several versatile features to facilitate e-commerce, and features in performance and reliability. A problem in the Net.Commerce package could...

Microburst uStorekeeper 1.x - Arbitrary Commands

Microburst uStorekeeper 1.x - Arbitrary Commands source: https://www.securityfocus.com/bid/2536/info A vulnerability exists in versions of uStorekeeper Online Shopping System from Microburst Technologies. The script fails to properly validate user-supplied input, allowing remote users to submit...

Microsoft Internet Explorer 5.0.15.56.0 - Telnet Client File Overwrite

Microsoft Internet Explorer 5.0.15.56.0 - Telnet Client File Overwrite source: https://www.securityfocus.com/bid/2463/info Services for Unix 2.0 contains a client side logging option which records all information exchanged in a telnet session. A vulnerability exists that could enable a remote use...

jarle aase war ftpd 1.67 b04 - Directory Traversal

jarle aase war ftpd 1.67 b04 - Directory Traversal source: https://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclos...

jarle aase war ftpd 1.67 b04 - Directory Traversal

source: https://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclose an arbitrary directory. This vulnerability could...