1874 matches found
SAP DB / MaxDB WebDBM Client Database Name Remote Overflow
The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of MaxDB on the remote host reportedly contains a buffer overflow that can be triggered by an HTTP request containing a long database name. A...
[Full-disclosure] EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability
Internet Explorer Compressed Content URL Heap Overflow Vulnerability Release Date: August 24, 2006 Date Reported: August 17, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 with MS06-042 - Windows 2000 Internet Explorer 6 SP1 with MS06-042 - Windows XP SP1 Overview:...
WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion
The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...
MyBB < 1.1.6 HTTP Header CLIENT-IP Field SQL Injection
Binary data 3689.prm...
[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow
Symantec Remote Management Stack Buffer Overflow Release Date: June 12, 2006 Date Reported: May 24, 2006 Severity: High Remote Code Execution Systems Affected: Symantec AntiVirus 10.0.x for Windows all versions Symantec AntiVirus 10.1.x for Windows all versions Symantec Client Security 3.0.x for...
WhatsUp Network Monitoring Tool Default Administrative Credentials
Binary data 3625.prm...
[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow
Microsoft Distributed Transaction Coordinator Heap Overflow http://www.eeye.com/html/research/advisories/AD20060509a.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: High Remote Code Execution Systems Affected: Windows NT 4.0 Windows 200...
[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service
Microsoft Distributed Transaction Coordinator Denial of Service http://www.eeye.com/html/research/advisories/AD20060509b.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: Low Denial of Service Systems Affected: Windows NT 4.0 Windows 2000...
USN-279-1: libnasl/nessus vulnerability
Jayesh KS discovered that the naslsplit function in the NASL Nessus Attack Scripting Language library did not check for a zero-length separator argument, which lead to an invalid memory allocation. This library is primarily used in the Nessus security scanner; a remote attacker could exploit this...
[EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow
Juniper Networks SSL-VPN Client Buffer Overflow Release Date: April 25, 2006 Date Reported: February 27, 2006 Patch Development Time In Days: 57 Days Severity: High Remote Code Execution Vendor: Juniper Networks Software Affected: Juniper SSL-VPN JuniperSetup Control Operating Systems Affected:...
NASL 'Split' function Buffer overflow Vulnerability
NASL Split function Buffer Overflow Vulnerability OS2A ID: OS2A1005 Status: 20/04/2006 Issue Discovered 21/04/2006 Fixed 25/04/2006 Advisory Released Class: Buffer Overflow Severity: Medium Overview: ------------- Nessus is a popular remote vulnerability scanner with a plugin architecture, each...
PHP iCalendar Local File Inclusion
Binary data 3479.prm...
Dwarf HTTP Server < 1.3.3 Multiple Remote Vulnerabilities (XSS, Disc)
The remote host is running Dwarf HTTP Server, a full-featured, Java-based web server. According to its banner, the version of Dwarf HTTP Server on the remote host reportedly fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue to disclose th...
Lotus Notes < 6.5.5 / 7.0.1 Attachment Handling Vulnerabilities
The version of Lotus Notes installed on the remote host reportedly contains five buffer overflow vulnerabilities and one directory traversal vulnerability in the KeyView viewers used to handle message attachments. By sending specially crafted attachments to users of the affected application and...
Ubuntu 5.04 : kdelibs fixed packages (USN-114-2)
USN-114-1 fixed a vulnerability in the PCX decoder of kimgio. Unfortunately it was discovered that the original patches were faulty and caused regressions. This update now has the correct patches. This update also fixes the disappearing KDE settings which were caused by the accidental removal of...
[EEYEB-20051220] Apple QuickTime QTIF Stack Overflow
EEYEB-20051229 Apple QuickTime QTIF Stack Overflow Release Date: January 10, 2006 Date Reported: December 29, 2005 Patch Development Time In Days: 12 days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X 10.3.9...
Testing NAT-T RFC VPN Detection
Binary data 3313.prm...
RealPlayer for Windows Multiple Overflows
According to its build number, the installed version of RealPlayer / RealOne Player / RealPlayer Enterprise for Windows on the remote host is affected by multiple buffer overflow vulnerabilities. An attacker may be able to leverage these issues to execute arbitrary code on the remote host subject...
[Full-disclosure] [EEYEB-20050329] Windows Metafile Multiple Heap Overflows
Windows Metafile Multiple Heap Overflows Release Date: November 8, 2005 Date Reported: March 29, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows Server 2003 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way the...
[Full-disclosure] [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability
Macromedia Flash Player Improper Memory Access Vulnerability Release Date: November 4, 2005 Date Reported: June 27, 2005 Severity: High Vendor: Macromedia Systems Affected: Macromedia Flash 6 on all Windows platforms Macromedia Flash 7 on all Windows platforms Overview: eEye Digital Security has...