6244 matches found
BEA WebLogic Server code execution paths may cause the current user to be incorrect
Overview A vulnerability in BEA WebLogic Server and Express may allow a local attacker to gain elevated privileges. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure for developing, integrating, securing, and managing distributed Java...
Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow
Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow // source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to...
Valve Software Half-Life Server 1.1.1.03.1.1.1c14.1.1.1a - Multiplayer Request Buffer Overflow
Valve Software Half-Life Server 1.1.1.03.1.1.1c14.1.1.1a - Multiplayer Request Buffer Overflow // source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the softwa...
CVE-2003-0251
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block...
UnrealIRCd OperServ Raw Channel Join DoS
The remote host is running a version of ircd which may crash when it receives certain raw messages. An attacker could exploit this flaw to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11797; scriptversion "1.14"; scriptbugtraqid8131;...
atomicboard 0.6.2 - Directory Traversal
source: https://www.securityfocus.com/bid/8236/info It has been reported that attackers may be able to modify the 'location' variable passed to the index.php file to cause the Web server to return arbitrary files. This script is prone to a directory traversal vulnerability, allowing attackers to...
Witango Server 5.0.1.061 - Remote Cookie Buffer Overflow
Witango Server 5.0.1.061 - Remote Cookie Buffer Overflow source: https://www.securityfocus.com/bid/8224/info Witango Server is prone to a remote buffer overflow vulnerability. Remote users may be able to send an HTTP request to a Witango server with a cookie containing a specific variable set to ...
Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)
-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...
Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)
-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...
Asus AAM6000EV ADSL Router Wide Open
Asus have been notified but haven't even acknowledged yet alone mentioned a fix. If the inbuilt webserver is activated, anyone on the local network can get the full user/pass list from the router without any identification whatsoever by going to the ip address of the router and appending /userdat...
Exceed 5.0/6.0/6.1/7.1/8.0 - Font Name Handler Buffer Overflow
// source: https://www.securityfocus.com/bid/8194/info The Exceed server and client have been reported prone to a remotely triggered buffer overflow vulnerability. An attacker may trigger this vulnerability by sending excessive data as a font name to the server via a malicios XLoadQueryFont...
StarSiege Tribes Server - Denial of Service (2)
StarSiege Tribes Server - Denial of Service 2 source: https://www.securityfocus.com/bid/8184/info StarSiege Tribes Game Server has been reported prone to a remotely triggered denial of service vulnerability. The issue presents itself when the affected server receives and processes a malformed UDP...
CCBILL CGI - 'ccbillx.c' 'whereami.cgi' Remote Code Execution
/ ===================================== CCBILL CGI Remote Exploit for /ccbill/whereami.cgi By: Knight420 7/07/03 spawns a shell with netcat and attempts to connect into the server on port 6666 to gain access of the webserver uid C COPYRIGHT Blue Ballz , 2003 all rights reserved...
CVE-2003-0251
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block...
CVE-2003-0474
Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475...
SMTP Generic Overflow Detection
The remote SMTP server crashes when it is sent a command with a too long argument. An attacker might use this flaw to kill this service or worse, execute arbitrary code on the server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11772; scriptversion"$Revision: 1.17...
EnceladusServerSuite3.9.11.txt
Enceladus Server suite 3.9.11 Release Date: ------------- June 15,2003 Severity --------- HighRemote crash-code execution Systems Affected: ----------------- Enceladus Server Suite 3.9.11 possibly all the older versions are vulnerable Description: Enceladus Server Suite is a package that contains...
Magic Winmail Server PASS Command Remote Format String
The remote Winmail POP server, according to its banner, is vulnerable to a format string attack when processing the USER command. An unauthenticated attacker may use this flaw to execute arbitrary code on this host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11742...
gnocatan Multiple Buffer Overflows
The remote host is running gnocatan, an online game server. There is a flaw in this version which may allow an attacker to execute arbitrary commands on this host, with the privileges this service is running with. An attacker may exploit this flaw to gain a shell on this host. C Tenable Network...