9156 matches found
Code injection
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...
DEBIAN-CVE-2007-3409
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...
CVE-2007-3409
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...
CVE-2007-3409
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service stack consumption via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop...
SerWeb Load_Lang.PHP远程文件包含漏洞
SerWeb是一款基于PHP的WEB应用程序。 SerWeb不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'LoadLang.PHP'脚本对用户提交的'SERWEBserwebdir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 IPTel SerWeb 0.9.4 目前没有详细解决方案提供： http://www.iptel.org/ser/security/ !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software,...
PT-2007-1040 · Net +1 · Net::Dns +1
Name of the Vulnerable Software and Affected Versions: Net::DNS versions prior to 0.60 Description: The issue allows remote attackers to cause a denial of service, specifically stack consumption, via a malformed compressed DNS packet with self-referencing pointers. This triggers an infinite loop,...
SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion
!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
DEBIAN-CVE-2007-2627
Cross-site scripting XSS vulnerability in sidebar.php in WordPress, when custom 404 pages that call getsidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string PHPSELF, a different vulnerability than CVE-2007-1622...
CVE-2007-2593
The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...
Design/Logic Flaw
The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop...
CVE-2007-2593
Technical details for CVE-2007-2593 are not publicly provided in the supplied documents; monitor for updates.
JVN#91305178 InfoBarrier4 self-decrypted file vulnerability
Impact The third party could view the contents of self-decrypted files or obtain the passwords used for self-decryption. Solution Products Affected InfoBarrier4 Standard Plus: V4.0L10, V4.0L20...
Information disclosure
Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types...
CVE-2007-1505
CVE-2007-1505 affects Fujitsu FENCE-Pro before V5L01 and Systemwalker Desktop Encryption (V12.0L10, L10A, L10B, L20, and V13.0.0). The vulnerability resides in self-decoding files created by these products, enabling local users to view contents and extract the decoding password protecting the fil...
CVE-2007-1505
Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types...
FLEXnet Connect Update Service Agent ActiveX (isusweb.dll) Overflow
Macrovision FLEXnet Connect, formerly known as InstallShield Update Service, is installed on the remote host. It is a software management solution for internally-developed and third-party applications, and may have been installed as part of the FLEXnet Connect SDK, other InstallShield software, o...
Sun Solaris Telnet Remote Authentication Bypass Vulnerability
Description Sun Solaris 10 is prone to a vulnerability that allows remote attackers to bypass authentication. Successfully exploiting this issue allows remote attackers to gain remote access to vulnerable computers. If the targeted computer is configured to allow non-console logins for superusers...
With ASP Trojan FTP and decompression-vulnerability warning-the black bar safety net
In broilers placed on the website,the most troublesome is probably the update and upload a lot of files, Terminal Services broad daylight easy to be found,open your own ftp and not assured. Your own online in a circle is found by combining the non-component upload asp Trojan can be easily achieve...
