490 matches found
Squid Proxy HTCP Packet Processing Denial of Service (CVE-2010-0639)
The Squid proxy server is a popular open source, Internet proxy and web caching application. It supports various network protocols such as HTTP, FTP, SSL, DNS, and HTCP. A denial of service vulnerability has been reported in Squid Proxy. The vulnerability is due to a NULL pointer dereference when...
Mongoose 2.8 - Space String Remote File Disclosure
source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may a...
Simple PHP Blog 0.5.1 - Local File Inclusion
Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may...
Novell eDirectory HTTP Request Content-Length Heap Buffer Overflow (CVE-2008-4478)
Novell eDirectory is an X.500 and LDAP compatible directory server intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. There exists a heap buffer overflow vulnerability in Novell...
Oracle Database DBMS_SNAP_INTERNAL Package Buffer Overflow (CVE-2007-2170)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
nginx HTTP Request Header Remote Buffer Overflow
Binary data 5216.prm...
httpdx 1.4.5 - dot Character Remote File Disclosure
httpdx 1.4.5 - dot Character Remote File Disclosure source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the...
httpdx 1.4.5 - dot Character Remote File Disclosure
source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server...
SuSE9 Security Update : the webdav apache module (YOU Patch Number 9363)
A vulnerability in the WebDAV module has been fixed. A remote attacker could crash a server process, leading to a Denial of Service scenario. Only installations configured for WebDAV access were affected. See http://nagoya.apache.org/bugzilla/showbug.cgi?id=31183. CVE-2004-0809 has been assigned ...
Free Articles Directory Remote File Inclusion Vulnerability
The remote web server contains a PHP application that is affected by a remote file include vulnerability. Description : The remote host is running Free Articles Directory, a CMS written in PHP. The installed version of Free Articles Directory fails to sanitize user input to the 'page' parameter i...
CA ARCserve Backup for Laptops and Desktops buffer overflow
LGServer server process buffer overflow...
Cosminexus Application Server Incorrect Group Permission Handling Vulnerability
Overview When a logical J2EE server or logical user server is started from Cosminexus Manager in Cosminexus Application Server, Cosminexus Manager may assign the wrong user's group permissions to an activated server process. Impact An attacker could exploit the vulnerability to obtain...
[Full-disclosure] Apple iPhoto v4.0.3 DPAP Server Denial of Service Exploit
A little zero-day exploit in memory of Dude VanWinkle. Apple iPhoto v4.0.3 DPAP Digital Photo Access Protocol Server Denial of Service Exploit. Other versions may be vulnerable too; the current version should not be vulnerable. The server process catches the exception, exits cleanly, but does not...
Mod_auth_kerb: Denial of service
Background Modauthkerb is an Apache authentication module using Kerberos. Description Modauthkerb improperly handles component byte encoding in the dergetoid function, allowing for a buffer overflow to occur if there are no components which require more than one byte for encoding. Impact An...
Ultimate PHP Board chat/login.php username Parameter Script Injection
Binary data 3872.prm...
2Wire路由器Web管理接口远程拒绝服务漏洞
2Wire HomePortal和OfficePortal都是2Wire推出的小型路由器设备。 2Wire路由器的Web管理接口处理用户请求时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果向2Wire路由器的WEB管理接口发送了包含有换行符参数的特制GET请求的话，就会导致拒绝服务，必须重启路由器才能恢复正常运行。 2wire HomePortal Series 2wire OfficePortal Series 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.2wire.com/...
[vuln.sg] CruiseWorks Directory Traversal and Buffer Overflow Vulnerabilities
vuln.sg Vulnerability Research Advisory CruiseWorks Directory Traversal and Buffer Overflow Vulnerabilities by Tan Chew Keong Release Date: 2006-10-24 Summary ------- Two vulnerabilities have been found in CruiseWorks. When exploited, the vulnerabilities allow an authenticated user to retrieve...
Ariadne CMS 2.4 - Remote File Inclusion
Ariadne CMS 2.4 - Remote File Inclusion source: https://www.securityfocus.com/bid/13206/info A remote file include vulnerability affects Ariadne CMS. This issue is due to a failure of the application to validate critical parameters before using them in a 'requireonce' function call. An attacker m...
Headline Portal Engine 0.x/1.0 - 'HPEInc' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19663/info Multiple remote file-include vulnerabilities affect HPE because the application fails to properly sanitize user-supplied input before using it in a PHP 'include' function call. An attacker may leverage these issues to execute arbitrary...