Lucene search
+L

271 matches found

securityvulns
securityvulns
•added 2005/07/07 12:00 a.m.•81 views

[EXPL] TCP Chat(TCPX) DoS (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/03/28 5:00 a.m.•29 views

CVE-2002-1653

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...

6.5AI score0.01078EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/28 12:00 a.m.•6 views

CVE-2002-1653: Undefined Security Weakness

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...

5CVSS5.9AI score0.01078EPSS
SaveExploits0References1
CVE
CVE
•added 2005/02/10 5:00 a.m.•58 views

CVE-2005-0316

WebWasher Classic 2.2.1 and 3.3 (server mode) are affected by CVE-2005-0316: the product fails to drop CONNECT requests to localhost from external hosts, enabling remote bypass of access restrictions. Affected component is WebWasher Server mode proxy handling CONNECT to 127.0.0.1. Impact is descr...

7.5CVSS6.7AI score0.08229EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
•added 2005/02/10 5:00 a.m.•36 views

CVE-2005-0316

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...

6.7AI score0.08229EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/10 12:00 a.m.•7 views

CVE-2005-0316: Undefined Security Weakness

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...

7.5CVSS5.9AI score0.08229EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2004/07/06 12:00 a.m.•43 views

FreeBSD : rsync buffer overflow in server mode (167)

The following package needs to be updated: rsync %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg5729b8ed5d7511d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

6.4AI score0.21157EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/12/10 12:00 a.m.•6 views

CVE-2003-0962: Undefined Security Weakness

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.5CVSS6.8AI score0.21157EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2003/12/04 9:14 p.m.•14 views

security flaw

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail...

7.5CVSS6.5AI score0.21157EPSS
SaveExploits1References4
NVD
NVD
•added 2002/12/31 5:00 a.m.•19 views

CVE-2002-1653

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...

5CVSS6.5AI score0.01078EPSS
SaveExploits0References3
OSV
OSV
•added 2002/12/31 5:00 a.m.•12 views

DEBIAN-CVE-2002-1653

Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information...

5CVSS6.9AI score0.01078EPSS
SaveExploits0References1
Rows per page
Query Builder