Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (3)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 3 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

KaZaA Media Desktop 1.7.1 - Large Message Denial of Service

// source: https://www.securityfocus.com/bid/5317/info KaZaA may consume large amounts of CPU when processing a sequence of large messages. It is possible for an attacker to flood a vulnerable system with a large number of messages, resulting in a denial of service condition. / kazaa denial of...

Microsoft SQL Server 2000 - sp_MScopyscript SQL Injection

source: https://www.securityfocus.com/bid/5309/info The Microsoft SQL Server 2000 spMScopyscript stored procedure does not sufficiently validate input before passing it to the xpcmdshell extended stored procedure. An attacker with the ability to execute a query or pass malicious input to a query...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting...

ATPhttpd 0.4b - Remote Buffer Overflow

ATPhttpd 0.4b - Remote Buffer Overflow / source: https://www.securityfocus.com/bid/5215/info ATPhttpd is a small webserver designed for high-performance. It was developed by Yann Ramin. There exist several exploitable buffer overflow conditions in ATPhttpd. Remote attackers may levarage these...

Formatstring Vulnerability in decfingerd 0.7

Hello all, I have no idea if this is the most current version of this application, I found it while browsing packetstormsecurity earlier. For all I know it may not even be kept current anymore. Anyhow... bad call to syslog is the culprit. I'm to lazy to code an exploit for this at the moment but ...

CVE-2002-0589

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling chinfo.php with the newpass and confirm parameters both set to the new password...

CVE-2002-0554

The CVE-2002-0554 issue affects IBM Informix Web DataBlade 4.12, where a SQL injection in an HTTP request allows remote attackers to bypass user access levels or read arbitrary files. This is documented in NVD/NVD-linked records; no explicit exploit details or remediation are provided in the conn...

ViewCVS 0.9.2 - Cross-Site Scripting

ViewCVS 0.9.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4818/info ViewCVS does not filter HTML tags from certain URL parameters, making it prone to cross-site scripting attacks. An attacker may exploit this by constructing a malicious link with script code to a site running...

Opera 5.12/6.0 - Frame Location Same Origin Policy Circumvention

source: https://www.securityfocus.com/bid/4745/info Opera is a web browser product created by Opera Software, and is available for a range of operating systems including Windows and Linux. A vulnerability has been reported in some versions of the Opera Browser. It is possible to bypass the same...

Squid 2.4.1 - Remote Buffer Overflow

/ 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any form, in...

SAP R/3 on Oracle: vulnerable Default Installation

SAP R/3 on Oracle: vulnerable Default Installation Topic: SAP R/3 on Oracle: vulnerable Default Installation Module: Default Oracle Listener Configuration Announced: 2002-04-27 Affects: All R/3 Releases using SQLnet V2 3.x, 4.x, 6.10 Vendor: 1SAP AG, Walldorf, Germany Vendor-Status: 2002-03-03:...

GNU Screen 3.9.x Braille Module - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/4578/info Screen is a freely available, open source terminal management software package. It is distributed and maintained by the Free Software Foundation. It is available for the Unix and Linux platforms. Under some circumstances, it may be possible f...

Sambar Server 5.1 - Script Source Disclosure

source: https://www.securityfocus.com/bid/4533/info An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files. Submitting a request for a known script file along with a space and null character %00, will successfully bypass the serverside UR...

Happy Easter / April Fools from Snosoft (Oracle 8.1.5 tnslsnr)

This is ment to be an April fools joke but if you still use old Oracle its not to funny I guess: After I ate a few too many hard boiled eggs this weekend I decided to install Oracle and play with it a little. Being poor I didn't have 800 bones to shell out on Oracle 16i so I had to settle with...

SquirrelMail 1.2.x - Theme Remote Command Execution

source: https://www.securityfocus.com/bid/4385/info SquirrelMail is a feature rich webmail program implemented in the PHP4 language. It is available for Linux and Unix based operating systems. SquirrelMail allows for extended functionality through a plugin system. A vulnerability has been reporte...

Linux Kernel 2.2.x/2.3/2.4.x - 'd_path()' Path Truncation

/ source: https://www.securityfocus.com/bid/4367/info The Linux kernel dpath function converts a dentry structure into an ASCII path name. The full path to the specified dentry is returned in a fixed length buffer of size PAGESIZE bytes. Reportedly, if a dentry structure is passed with a path whi...

Progress Database 9.1 - sqlcpp Local Buffer Overflow

Progress Database 9.1 - sqlcpp Local Buffer Overflow // source: https://www.securityfocus.com/bid/4402/info Progress is a commercial database for Microsoft Windows and Unix systems. A buffer overflow has been reported in the sqlcpp program included with Progress, used as a SQL preprocessor...

CVE-2001-0613

The CVE-2001-0613 entry applies to Omnicron Technologies’ OmniHTTPd Pro HTTP Server, affected in version 2.08 and earlier. The connected OpenVAS/NASL and Nessus entries describe a vulnerability where the remote server is vulnerable to a buffer overflow when handling specially long POST requests, ...

Multiple PHP Vulnerabilities - Remote Compromise Exploit in Circulation

Internet Security Systems Security Alert February 27, 2002 Multiple PHP Vulnerabilities: Remote Compromise Exploit in Circulation Synopsis: ISS X-Force has learned of multiple buffer overflow vulnerabilities present in the PHP Hypertext Preprocessor scripting language. PHP is a popular server-sid...