CVE-2005-4343

Adobe formerly Macromedia ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability"...

Sambar /cgi-bin/mailit.pl Vulnerability

The Sambar SPDX-FileCopyrightText: 2000 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sambar:sambarserver"; ifdescription...

CVE-2004-2529

CVE-2004-2529 affects the Gadu-Gadu client. The issue allows remote attackers to bypass the client’s image-send option by transmitting a very small image file, which could be used in conjunction with image-related vulnerabilities. The available documents do not specify concrete root-cause details...

CVE-2004-2529

Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities...

PT-2005-4099 · Ftgate · Mailsite Express

Name of the Vulnerable Software and Affected Versions: Mailsite Express affected versions not specified Description: The issue allows remote attackers to upload and execute files with executable extensions, such as ASP, by utilizing the compose page feature. Attackers can attach the file and then...

cvsbug -- race condition

Problem description A temporary file is created, used, deleted, and then re-created with the same name. This creates a window during which an attacker could replace the file with a link to another file. While cvsbug1 is based on the send-pr1 utility, this problem does not exist in the version of...

WebCalendar -- remote file inclusion vulnerability

WebCalendar is proven vulnerable to a remote file inclusion vulnerability. The sendreminders.php does not properly verify the "includedir" parameter, giving remote attackers the possibility to include local and remote files. These files can be used by the attacker to gain access to the system...

ICMP-based blind connection-reset attack

Folks, Here's the packet trace and the explanation of an ICMP-based blind connection-reset attack. In our sample scenario, a web-client 10.0.0.1, TCP port 3270 is downloading a file from a web-server 192.168.0.1, TCP port 80. If the TCP/IP implementations of both end-points are vulnerable,you can...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR...

CVE-2003-1135

CVE-2003-1135 concerns Yahoo! Messenger 5.6, where a buffer overflow in the sendfile handling can be triggered by a crafted file send request containing a large number of percent characters after the Yahoo ID. The issue is described as a denial of service (crash). Connected sources consistently i...

CVE-2005-0981

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 payment or 2 send parameter...

CVE-2005-1020

Secure Shell SSH 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service device reload 1 via a username that contains a domain name when using a TACACS+ server to authenticate, 2 when a new SSH session is in the login phase and a currently logged in user issues a sen...

CVE-2005-0981

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 payment or 2 send parameter...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0961

Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service memory exhaustion via a series of Access-Request packets with 1 Ascend-Send-Secret, 2 Ascend-Recv-Secret, or 3 Tunnel-Password attributes...

security flaw

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-2529

Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities...

security flaw

The scmsend function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service system hang via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition...

security flaw

Memory leak in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service memory consumption by repeatedly calling the ipcmsgsend function...

woolchat.txt

Hi, I found a bug about WoolChat japanese popular irc client http://www.vector.co.jp/soft/win95/net/se091872.html which allow anyone to kill victim's WoolChat. It has a problem to handle DCC SEND query so if 260 or more bytes file name is specified, it exits immediately with error dialog. DoS...