1145 matches found
Delegate < 8.10.3 Multiple Buffer Overflow Vulnerabilities
Delegate is prone to multiple remote buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[Full-disclosure] Buffer-overflow in Glider collect'n kill 1.0.0.0
Luigi Auriemma Application: Glider collect'n kill http://www.glider-game.com Versions: 1.0.0.0 Platforms: Windows Bug: buffer-overflow Exploitation: remote, versus server Date: 02 Nov 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3...
Netware Perl CGI overflow
The remote web server crashes when it receives a too long URL for the Perl handler. It might be possible to make it execute arbitrary code through this flaw. See http://support.novell.com/servlet/tidfinder/2966549 OpenVAS Vulnerability Test $Id: netwareperloverflow.nasl 8023 2017-12-07 08:36:26Z...
Microsoft Windows MSDTC Memory Corruption Vulnerability
Description The Microsoft Windows MSDTC Microsoft Distribution Transaction Coordinator service is prone to a memory corruption vulnerability. This issue could allow for execution of arbitrary code in the context of the service. The vulnerability may be remotely exploitable in some circumstances,...
Paros proxy unauthorized access
hsqldb database has built-in password and is remotely accessible...
Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow
The Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions feature in specific versions of Cisco IOS software is vulnerable to a remotely-exploitable buffer overflow condition. Devices that do not support, or are not configured for Firewall Authentication Proxy for FTP and/or Teln...
myBloggie "username" SQL Injection Vulnerability
Secunia Advisory: SA16699 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Manipulation of data Where: From remote Solution Status: Vendor Patch Software: myBloggie 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...
Oracle Reports Server 6.0.8/9.0.x - Unauthorized Report Execution
source: https://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution of the report by issuing an HTTP GET request to the affected...
Slackware 8.1 / 9.0 / current : Sendmail vulnerabilities fixed (SSA:2003-260-02)
The sendmail packages in Slackware 8.1, 9.0, and -current have been patched to fix security problems. These issues seem to be remotely exploitable, so all sites running sendmail should upgrade right away. Sendmail's 8.12.10 announcement may be found here: http://www.sendmail.org/8.12.10.html...
HP-UX PHSS_32690 : HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Privileged Code Execution, Denial of Service (DoS) (HPSBMA01140 SSRT4795, SSRT4797, SSRT4864 rev.2)
s700800 11.X OV NNM6.2 Patch for Jan-05 : Potential vulnerabilities have been identified with OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely by an unauthorized user to execute privileged code or to cause a Denial of ServiceDoS. %NASLMINLEVEL 70300 C Tenabl...
kdewebdev -- kommander untrusted code execution vulnerability
A KDE Security Advisory reports: Kommander executes without user confirmation data files from possibly untrusted locations. As they contain scripts, the user might accidentally run arbitrary code. Impact: Remotly supplied kommander files from untrusted sources are executed without confirmation...
HP-UX PHSS_27477 : s700_800 11.04 Virtualvault 4.5 Inside Admin Server Update
s700800 11.04 Virtualvault 4.5 Inside Admin Server Update : The remote HP-UX host is affected by multiple vulnerabilities : - Remotely exploitable potential vulnerabilities have been reported in CA-2002-21 and CVE-2002-0658. - A potential remotely exploitable vulnerability in handling of large da...
[Full-Disclosure] Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1
Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=X Size=232 Encoder=PexFnstenvSub...
[SA13012] TortoiseCVS "SSH2_MSG_DEBUG" Packet Handling Buffer Overflow
TITLE: TortoiseCVS "SSH2MSGDEBUG" Packet Handling Buffer Overflow SECUNIA ADVISORY ID: SA13012 VERIFY ADVISORY: http://secunia.com/advisories/13012/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: TortoiseCVS 1.x http://secunia.com/product/4183/ DESCRIPTION: A...
Patch available for multiple high risk vulnerabilities in RealPlayer
John Heasman of NGSSoftware has discovered multiple high risk vulnerabilities in RealPlayer. Versions affected include RealPlayer 10.5 6.0.12.1040 RealPlayer 10.5 Beta 6.0.12.1016 RealPlayer 10 RealOne Player v1, v2 RealPlayer 8 RealPlayer Enterprise The flaws, that include remotely exploitable...
CVE-2001-0612
CVE-2001-0612 affects McAfee Remote Desktop 3.0 and earlier. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending a large number of packets to port 5045. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, no authentication, and part...
FreeBSD : tnftpd -- remotely exploitable vulnerability (194)
The following package needs to be updated: tnftpd %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc4b025bbf05d11d89837000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
gaim remotely exploitable vulnerabilities in MSN component
Sebastian Krahmer discovered several remotely exploitable buffer overflow vulnerabilities in the MSN component of gaim. In two places in the MSN protocol plugins object.c and slp.c, strncpy was used incorrectly; the size of the array was not checked before copying to it. Both bugs affect MSN's...
FreeBSD : seti@home remotely exploitable buffer overflow (176)
The following package needs to be updated: setiathome %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg0e154a9c5d7a11d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
FreeBSD : pound remotely exploitable vulnerability (154)
The following package needs to be updated: pound %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgfb5211199bc411d893660020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...