Opera < 7.54 Download File Type Dialog Spoofing

The version of Opera on the remote host contains a flaw that allows an attacker to determine the existence of files and directories on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a user of the remote host into visiting it with Opera. C Tenable...

Wget < 1.8.3 Rogue FTP Site File Deletion

Binary data 1744.prm...

Opera < 7.54 Multiple Function Address Bar Spoofing

The version of Opera installed on the remote host is vulnerable to a flaw wherein a remote attacker can obscure the URI, leading the user to believe that he/she is accessing a trusted resource. To exploit this issue, an attacker would need to set up a rogue website, then entice a local user to...

MS04-023: Vulnerability in HTML Help Could Allow Code Execution (840315)

The remote host is subject to two vulnerabilities in the HTML Help and showHelp modules that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to set up a rogue website containing a malicious showHelp URL, and would need to lure a...

MS KB870669: ADODB.Stream object from Internet Explorer

The remote host contains a vulnerability in IE. The ADODB.Stream object can be used by a malicious web page to read and write to local files. An attacker could use this flaw to gain access to the data on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and...

CuteFTP < 5.0.2.0 Multiple Vulnerabilities

CuteFTP, an FTP client, is installed on the remote Windows host. The version of CuteFTP on the remote host reportedly is affected by a buffer overflow that may be exploited by an attacker to execute arbitrary commands, subject to the privileges of the current user. To exploit this issue, an...

SmartFTP Multiple Command Response Overflow

The remote host is running SmartFTP - an FTP client. There is a flaw in the remote version of this software that could allow an attacker to execute arbitrary code on this host. To exploit it, an attacker would need to set up a rogue FTP server and have a user on this host connect to it. C Tenable...

Opera < 7.03 Multiple Vulnerabilities

The version of Opera installed on the remote host is vulnerable to various security flaws, ranging from cross-site scripting to buffer overflows. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host visit it using Opera. He would then be able to execute...

XSS in Postnuke Rogue release &#40;0.72&#41;

Program: Postnuke Rogue release 0.72 Latest. HomePage: www.Postnuke.com/.org Description: PostNuke is a weblog/Content Management System CMS. Whilst PostNuke is a fork of PHP-Nuke, the entire core of the product has been replaced, making it far more secure and stable, and able to work in...

CVE-2002-1192

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...

CVE-2002-1192

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file...

CVE-2002-1192

CVE-2002-1192 describes multiple buffer overflows in the rogue game affecting NetBSD (1.6 and earlier) and FreeBSD 4.6 (and possibly other OSes). Local users can gain privileges in the 'games' group via malformed entries in a game save file. The root cause is not explicitly broken out beyond memo...

Rogue 5.3 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/5837/info Rogue is a game included with BSD distributions including FreeBSD and NetBSD. By passing an overly long value when restoring a saved game, it is possible for an attacker to corrupt memory. Exploitation of this issue could result in privilege...

Rogue 5.3 - Local Buffer Overflow

Rogue 5.3 - Local Buffer Overflow source: https://www.securityfocus.com/bid/5837/info Rogue is a game included with BSD distributions including FreeBSD and NetBSD. By passing an overly long value when restoring a saved game, it is possible for an attacker to corrupt memory. Exploitation of this...

Buffer overflow in mIRC allowing arbitary code to be executed.

General Info ------------ Researched by: James Martin Full advisory: http://www.uuuppz.com/research/adv-001-mirc.htm Exploit: Proof of concept code available at above URL. Product: mIRC Website: http://www.mirc.com Version: 5.91 and all prior versions to be best of my knowledge. Fix: A patch will...

Microsoft Windows Server 2000 - 'telnet.exe' NTLM Authentication

source: https://www.securityfocus.com/bid/1683/info By default, the telnet client telnet.exe shipped with Microsoft Windows 2000 utilizes Windows NT Challenge/Response NTLM as an authentication method. When establishing a connection to a host, the telnet client will attempt authentication via NTL...