4366 matches found
Several Mambo 4.0.14 Stable Exploits
Product : Mambo 4.0.14 Stable Website : http://www.mamboserver.com/ Status : Vendor notified via email Imapct : Search for "Mambo Open Source is Free Software released under the GNU/GPL License." with quotes returned more than 500 results. Credit : lifofifo, hackingzone.org Originally posted at :...
Apache stops writing access/error logs after processing "Request-URI" containing "0x1A" characters
Overview A vulnerability in the logging of URI requests may permit a remote attacker to disable logging on an Apache HTTP Server. Version 1.3.27 on Windows systems is reported vulnerable to this issue. Description Apache HTTP Server 1.3.27 running on Win32 systems contains a vulnerability that...
IBM Tivoli Firewall Security Toolbox buffer overflow vulnerability
Subject : IBM Tivoli Firewall Security Toolbox TFST remote buffer overflow vulnerability Version : Tivoli Firewall Toolbox version 1.2 Platform: All supported platforms 0o Overview ----------- The Tivoli Firewall Toolbox is an optional component of the Tivoli management environment and provides t...
Alchemy Eye HTTP Server does not adequately validate user input thereby allowing remote command execution
Overview Alchemy Eye does not properly validate HTTP requests, allowing arbitrary command execution. Description Alchemy Eye includes an HTTP server for remote system monitoring and control. In versions 2.0 through 2.6 of Alchemy Eye, the HTTP server component does not adequately validate HTTP...
DSA-141 mpack - buffer overflow
Bulletin has no description...
Microsoft ASP.NET contains buffer overflow
Overview Microsoft ASP.NET contains buffer overflow in routine that handles the processing of cookies in StateServer mode. Description ASP.NET is a programming framework provided by Microsoft. For more details about this framework, please see the official web page.A remotely exploitable buffer...
SECURITY vulnerability in ECS-K7S5A(L) boards
A repost, my previous one seem to have failed. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY vulnerability in ECS-K7S5AL boards DESCRIPTION =========== The administrator-password set in the BIOS of the K7S5AL locks out BIOS-access from the console. However, it does not disable access to...
Microsoft Internet Information Server (IIS) vulnerable to heap overflow during processing of crafted ".htr" request by "ISM.DLL" ISAPI filter
Overview A buffer overflow in the HTR ISAP extension on IIS servers could permit an intruder to interrupt the normal operation of IIS or possibly execute arbitrary code with the privileges of the HTR extension. Description HTR is a server-side scripting technology for IIS which has largely been...
IBM AIX Parallel Systems Support Program (PSSP) contains vulnerability in File Collections subsystem allowing arbitrary access to sensitive configuration files
Overview IBM AIX Parallel Systems Support Programs PSSP contains a vulnerability allowing unauthorized access to files in valid file collections. Description IBM PSSP software is used to provide a central point of management control for a cluster of RS/6000 SP nodes and IBM pSeries and IBM RS/600...
Переполнение буфера в ZBServer (buffer overflow)
No description provided...
Buffer Overflows in various email clients
Overview Buffer Overflows in several MIME headers affect a large number of electronic mail clients. Description A variety of electronic mail clients circa 1998 are vulnerable to buffer overflow attacks in the code that processes MIME headers. See the vendor statements referenced below for details...
Check Point FireWall-1 RDP Bypass Vulnerability
FOR PUBLIC RELEASE ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 1.2 2001-07-09 ------------------------------------------------------------------------ The latest version of this document is available at...
undocumented 3Com Netbuilder II SNMP ILMI commnity
WWW.PLAZASITE.COM Systems & Security Division Title: 3Com Netbuilder II SNMP ILMI Community Date: 15-5-2001 Platform: Only tested Netbuilder II routers Author: Juan Manuel Pascual [email protected] Status: Vendor Contacted but no answers received OVERVIEW: It seems to exist an undocumented...
PHPSlash : potential vulnerability in URL blocks
sAvAte inc. Serial Savate System advisory --------------------------------------- xxxxxxxxxxx2.adv.en Program: PHPSLASH Homepage: http://www.phpslash.org Author Contacted: 15/apr/2001 Answer: 16/apr/2001 ajayrockrock Patch : 16/apr/2001 Version tested: 0.6.1 Found by : tobozo - Problem descriptio...
Sun Solaris SNMP proxy agent /opt/SUNWssp/bin/snmpd contains buffer overflow
Overview The SNMP proxy agent on certain large Solaris systems contains a buffer overflow. It may be possible, though it is unconfirmed, that an intruder could use this flaw to execute code with root privileges. Description The Sun Enterprise 10000 is monitored and controlled by a systems called ...
Security bugs in nokia voyager, BO dev.
Voyager works with a multipurposes cgi called htmlpage that make a call to htmlgen with a filename as a template script. Htmlgen produce the final html page returned by apache. if u test this kind of url:...
spj-004-000.txt
SPJ-004-000: .::::::::+ s0ftpr0ject 2K +::::::::. ::::+ Digital Security for Y2K +:::: :::'""""'""""'""""'""""'""'""::: ::'.gS$"$Sn. .gS$"$Sn. Sn.:: :: $$$$$ $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$$$$$n $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$s$$$$' $$$$ :: :: $$$$$ $$$$$ $$$$$...
Cisco Secure PIX Firewall FTP Vulnerabilities
...
shell-modem-access.txt
Date: Wed, 27 Jan 1999 09:01:51 +0100 From: Marc SCHAEFER To: [email protected] Subject: UNIX shell modem access vulnerabilities NAME ptylogin AUTHOR Marc SCHAEFER with the help of the author of mgetty, Gert DOERING, and Theodore Y TSO. VERSION $Id: ANNOUNCEMENT,v 1.7 1999/01/27 08:00:28...