CVE-2002-0596

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...

CVE-2002-0595

The CVE-2002-0595 entry describes a buffer overflow in WebTrends Reporting Center 4.0d, specifically in WTRS_UI.EXE (WTX_REMOTE.DLL). The vulnerability can be triggered by a long HTTP GET request to the /reports/ directory, allowing remote execution of arbitrary code. Metrics indicate a Network-v...

CVE-2002-0596: Exposure of Sensitive Information to an Unauthorized Actor

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...

CVE-2002-0595: Undefined Security Weakness

Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...

w00w00-AIM-2.txt

================================== AOL Instant Messenger Overflow 2 w00w00! http://www.w00w00.org ================================== PRELUDE AOL Instant Messenger is still vulnerable to a serious overflow, as discovered by John Hennessy while tweaking our example exploit, w00aimexp. A few simple...

w00w00 on AOL Instant Messenger remote overflow #2

================================== AOL Instant Messenger Overflow 2 w00w00! http://www.w00w00.org ================================== PRELUDE AOL Instant Messenger is still vulnerable to a serious overflow, as discovered by John Hennessy while tweaking our example exploit, w00aimexp. A few simple...

Buffer overflow in WebTrends Reporting Center

No description provided...

WebTrends Reporting Center

NGSSoftware Insight Security Research Advisory Name: WebTrends Reporting Center 4.0d Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.webtrends.com Author: Mark Litchfield [email protected] Advisory URL:...

WebTrends Reporting Center for Windows 4.0 d - GET Buffer Overflow

WebTrends Reporting Center for Windows 4.0 d - GET Buffer Overflow source: https://www.securityfocus.com/bid/4531/info WebTrends Reporting Center is used to organize and present usage information for multiple server web environments. Reporting Center is available for Windows NT and 2000, Linux an...

Phpnuke module.php vulnerability and php error_reporting issue

Phpnuke module.php vulnerability and PHP errorreporting issue on 16 december by Cabezon Aurйlien | [email protected] As you know, there are many Cross site scripting issue on Phpnuke modules and other web application using PHP. There is a cross site scripting issue cause : 1 there ...

CVE-1999-1195: Undefined Security Weakness

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly...

WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure

WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of...

WebTrends Enterprise Reporting Server 3.1 c/3.5 - Source Code Disclosure

source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of arbitrary scripts on the WebTrends Live webserver. This is accomplished by...

CVE-2000-1007

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

CVE-2000-1007

CVE-2000-1007 affects I-gear 3.5.7 and earlier; the issue stems from improper processing of log entries where a URL exceeds 255 characters, which can cause reporting errors. The available references describe the vulnerability as a processing flaw in log handling, with no explicit exploitation det...

CVE-2000-1007

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

CVE-2000-1007: Undefined Security Weakness

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k))

Resintm serves the fastest servlets and JSP. With Java and JavaScript support, Resin gives web applications the flexibility to choose the right language for the task. Resin's leading XSL XML stylesheet language support encourages separation of content from formatting. Resin provides a fast servle...

bugzilla.txt

Advisory: Unchecked systemblaat $var blaat call in Bugzilla 2.8 Root66 - ShellOracle - b0f By - [email protected] / Introduction / Bugzilla is a database for bugs. It let's people report bugs and assigns these bugs to the appropriate developers. Developer s can use bugzilla to keep a to-do...

hotmail.passwd.trap.txt

Date: Fri, 23 Apr 1999 13:55:24 -0500 From: David L. Nicol To: [email protected] Subject: javascript hotmail password trap Hello, I was informed this morning that a free form data mailer I maintain http://www.tipjar.com/generic.html was being involved in a javascript-based hotmail password...