2355 matches found
PT-2004-3380 · Nexgen · Nexgen Ftp Server
Name of the Vulnerable Software and Affected Versions: Nexgen FTP Server versions prior to 2.2.3.23 Description: The issue allows remote authenticated users to read or list arbitrary files via "C:" sequences in the 1 RETR get, 2 NLST ls, 3 LIST ls, 4 RNFR, or 5 RNTO FTP commands. This is a...
CVE-2004-0835
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...
security flaw
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...
CVE-2004-0835: Undefined Security Weakness
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...
MySQL 3.x4.x - ALTER TABLERENAME Forces Old Permission Checks
MySQL 3.x4.x - ALTER TABLERENAME Forces Old Permission Checks source: https://www.securityfocus.com/bid/11357/info MySQL is reported prone to multiple local vulnerabilities. Exploiting these issues may allow an attacker to bypass security restrictions or cause a denial-of-service condition in the...
MySQL 3.x/4.x - ALTER TABLE/RENAME Forces Old Permission Checks
source: https://www.securityfocus.com/bid/11357/info MySQL is reported prone to multiple local vulnerabilities. Exploiting these issues may allow an attacker to bypass security restrictions or cause a denial-of-service condition in the application. Rportedly, an attacker can bypass certain securi...
mysql -- erroneous access restrictions applied to table renames
A Red Hat advisory reports: Oleksandr Byelkin discovered that "ALTER TABLE ... RENAME" checked the CREATE/INSERT rights of the old table instead of the new one. Table access restrictions, on the affected MySQL servers, may accidently or intentially be bypassed due to this bug...
DoS Vulnerabilities in Crob FTP Server 2.60.1
DoS Vulnerabilities in Crob FTP Server 2.60.1 Tested on Windows 98 Crash the Server with "con": Rename a file to "con" and the server will crash. Crash the Server with "s": Login with ssssss Send FTP commands with sssss like dir ssssss Zero X, member of www.lobnan.de and www.lostkey.org...
apache-linux.txt
/ LINUX X86 APACHE REMOTE EXPLOIT!!!!!!!!! This is the unpublished source for apache OpenSSL handshake exploit. We obtained this exploit by modifying a circulating apache worm, created by contem@efnet BY nebunu compile: gcc -o apache-ex apache.ex.c -lcrypto run: ./apache-ex do not use hostname! u...
UoW IMAPd Server 10.23412.264 - Remote Buffer Overflow
UoW IMAPd Server 10.23412.264 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes possible t...
CVE-2001-0283: Undefined Security Weakness
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT...
CVE-2000-0648
WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO RNTO command before a RENAME FROM RNFR command...
Re: another WU imapd buffer overflow
Hi again, imapd seems to be very weak. I've found another three buffer overruns. This time affected commands are LSUB, RENAME and FIND: OK mail IMAP4rev1 v12.264 server ready login siva9 secret OK LOGIN completed lsub "" AAAAAAAAAAAAA.... A 1024 - 8179 SIGSEGV received. OK localhost IMAP4rev1...
