CVE-2004-2104

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...

CVE-2004-1784

CVE-2004-1784 concerns Webcam Watchdog 3.63. The web server component is vulnerable to a buffer overflow triggered by a long HTTP GET request, enabling remote code execution. The advisory notes a high severity (CVSSv2 7.5) with network access, no authentication required, and partial impacts on co...

Vulnerability kali's tagboard

There are some bugs in the kali's tagboard, you can access to the admin system without password!, you can put iframes, scripts... But the most vulnerabilitie is in the ban ip's, you can put this script: " ? system$cmd ? " and execute commands in the server with this url: Example:...

Foxmail server "USER" command Multiple remote buffer overflow

AUTHOR: Fortinet, inc xouyangxouyangatfortinet.com [email protected] PRODUCTS: Foxmail Server. A Mail server for both Windows and linux. AFFECTED VERSION: Foxmail server for windows version 2.0 latest. I've just tested windows server, the linux version may be vulnerable too. Description:...

phpList <= 2.6.3 Multiple Vulnerabilities

According to its banner, the version of phpList installed on the remote host is prone to arbitrary command execution as well as information disclosure vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

phpWebSite Image Announcement Upload Arbitrary Command Execution

The remote host is running a version of phpWebSite in which the Announcements module allows a remote attacker to both upload PHP scripts disguised as image files and later run them using the permissions of the web server user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

punBB < 1.2.2 Multiple SQL Injection and Authentication Bypass Vulnerabilities

Binary data 2651.prm...

glFTPd 1.x2.0 ZIP Plugins - Multiple Directory Traversal Vulnerabilities

glFTPd 1.x2.0 ZIP Plugins - Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/12586/info It is reported that various ZIP related plugins supplied with the server contain multiple directory traversal vulnerabilities. These issues may allow remote attackers to...

CVE-2005-0433

Technical details about CVE-2005-0433 are not publicly provided in the supplied documents. Available sources describe a path disclosure in Php-Nuke 7.5. Monitor for updates on affected versions, impact, and fixes.

RaidenHTTPD 1.1.27 - Remote File Disclosure

RaidenHTTPD 1.1.27 - Remote File Disclosure source: https://www.securityfocus.com/bid/12451/info RaidenHTTPD is reported prone to a remote file disclosure vulnerability. It is reported that the service does not correctly handle requests for restricted files that reside outside of the web document...

Multiple Oracle Database Server security problems

SQL injection, privilege escalation, buffer overflows...

CVE-2004-0894

LSASS Local Security Authority Subsystem Service of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program...

Shoutcast Server: Remote code execution

Background Shoutcast Server is Nullsoft's streaming audio server. It runs on a variety of platforms, including Linux, and is extremely popular with Internet broadcasters. Description Part of the Shoutcast Server Linux binary has been found to improperly handle sprintf parsing. Impact A malicious...

GLSA-200412-14 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200412-14 PHP: Multiple vulnerabilities Stefan Esser and Marcus Boerger reported several different issues in the unserialize function, including serious exploitable bugs in the way it handles negative references CAN-2004-1019...

CVE-2004-0894

LSASS Local Security Authority Subsystem Service of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program...

NapShare 1.2 - Remote Buffer Overflow (1)

NapShare 1.2 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/11967/info It is reported that NapShare is susceptible to a remote buffer overflow vulnerability. This is due to a failure of the application to properly bounds check user-supplied data prior to copying it to a...

Possible Buffer Overrun in smbd

Summary: A possible buffer overrun in smbd could lead to code execution by a remote user Patch Availability A patch for Samba 3.0.7 samba-3.0.7-CAN-2004-0882.patch is available from http://www.samba.org/samba/ftp/patches/security/. The patch has been signed with the "Samba Distribution Verificati...

Debian DSA-600-1 : samba - arbitrary file access

A vulnerability has been discovered in samba, a commonly used LanManager-like file and printer server for Unix. A remote attacker may be able to gain access to files which exist outside of the share's defined path. Such files must still be readable by the account used for the connection, though...

HTTP URI Handling Format String

The remote web server seems to be vulnerable to a format string attack on the URI. An attacker might use this flaw to make it crash or even execute arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15640; scriptversion"$Revision: 1.19 $";...

PHP 4.x5 - cURL open_basedir Restriction Bypass

PHP 4.x5 - cURL openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/11557/info It is reported that cURL allows malicious users to bypass 'openbasedir' restrictions in PHP scripts. This issue is due to a failure of the cURL module to properly enforce PHPs 'openbasedir'...