1857 matches found
CVE-2004-1627
Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long APPE command...
NetworkActive Web Server Resource Exhaustion DoS
Binary data 2348.prm...
Debian DSA-089-2 : icecast-server - remote root exploit (and others)
The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems : - if a client added a / after the filename of a file to be downloaded the server would crash - by escaping dots as %2E it was possible to circumvent security measures and...
Debian DSA-114-1 : gnujsp - unauthorized file access
Thomas Springer found a vulnerability in GNUJSP, a Java servlet that allows you to insert Java source code into HTML files. The problem can be used to bypass access restrictions in the web server. An attacker can view the contents of directories and download files directly rather then receiving...
aspWebAlbum album.asp SQL Injection
The remote host appears to be running aspWebAlbum, an ASP script designed to faciliate the integration of multiple photo albums in a web-based application. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which may in turn be used to gain...
IlohaMail Attachment Arbitrary File Create/Overwrite
The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions do not properly check the upload path for file attachments, which could allow an attacker to place a file on the target in a location writable by the web user if the file-based backend is in use...
CVE-2002-0396
The CVE-2002-0396 issue affects Red-M 1050 AP web management server. It does not require site-wide credentials for every request; session state is not tied to a logged-in user, enabling an attacker from the same IP as a valid session to access the management interface. The impact is described as ...
keeneTraversal102.txt
GulfTech Security Research August, 25th 2004 Vendor : Keene Software URL : http://www.keenesoftware.com Version : Keene Digital Media Server 1.0.2 Risk : Directory Traversal Vulnerability Description: Keene Digital Media Server is an easy and affordable way to share all things digital with friend...
GLSA-200404-13 : CVS Server and Client Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200404-13 CVS Server and Client Vulnerabilities There are two vulnerabilities in CVS; one in the server and one in the client. The server vulnerability allows a malicious client to request the contents of any RCS file to which the...
AWStats rawlog.pm logfile Parameter Arbitrary Command Execution
The remote host is running AWStats, a free real-time logfile analyzer. The AWStats Rawlog Plugin which is installed is prone to an input validation vulnerability. The issue exists in the 'logfile' URI data passwed to the 'awstats.pl' script. An attacker may exploit this to execute commands remote...
SQL Server Cleartext 'admin' Account 'administrator' Password Authentication (deprecated)
Binary data 1126.prm...
MaxDB WebSQL < 7.5.00.18 Remote Overflow
Binary data 2528.prm...
CVSTrac chdir() chroot Jail Escape
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the chdir function that may allow an attacker to escape the chroot jail. An attacker, exploiting this flaw, would be able to access files outside of the web...
CVSTrac Ticket Title Arbitrary Command Execution
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to ticket titles containing a semi-colon ';' that may allow an attacker to execute arbitrary commands on the system. Nessus has determined the vulnerability...
Mandrake Linux Security Advisory : squid (MDKSA-2001:066)
The Squid proxy server has a serious security flaw in versions 2.3.STABLE2 through 2.3.STABLE4. This problem surfaces when Squid is used in httpdaccel mode. If you configure httpaccelwithproxy off then any request to Squid is allowed. Malicious users may use your proxy to portscan remote systems,...
[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...
Potential Buffer Overrun in smbd
Description A buffer overrun has been located in the code used to support the 'mangling method = hash' smb.conf option. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible...
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion / source: https://www.securityfocus.com/bid/10746/info Kleinanzeigen is prone to a file include vulnerability. This issue could allow a remote attacker to include malicious files containing arbitrary code to be executed on a vulnerab...
RHEL 2.1 : cvs (RHSA-2003:013)
Updated CVS packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability which would permit arbitrary command execution on servers configured to allow anonymous read-only access. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 CVS is a...