11317 matches found
Kyocera Mita Scanner File Utility 3.3.0.1 File Transfer Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30855/info Kyocera Mita Scanner File Utility is prone to a directory-traversal vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to create and overwrite arbitrary...
Half-Life Server 3.1.1.0 - Remote Buffer Overflow Exploit
No description provided by source. / hoagiehlserver.c Remote exploit for Halflife-Servers. Binds a shell to port 30464/tcp and connects to it. Author: [email protected] This hole was found by Auriemma Luigi. Uses code from the proof-of-concept DoS-exploit by Auriemma Luigi. Tested with HL-Server...
BitDefender Products Update Server HTTP Daemon Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27358/info BitDefender Update Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access potentially...
Toribash 2.x - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25359/info Toribash is prone to multiple remote code-execution and denial-of-service vulnerabilities that affect game servers and clients. Seven vulnerabilties were reported. Attackers may exploit these issues to execute...
SunAge 1.8.1 - Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29889/info SunAge is prone to multiple denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to crash affected game servers, denying service to legitimate users. SunAge 1.08.1 is...
CdomainFree <= 2.4 - Remote File Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/304/info A vulnerability in a CGI program part of CdomainFree allows remote malicious users to run any executable already existing to the machine. The vulnerability is in the whoisraw.cgi program. This CGI passes user inp...
MS Windows 2000/NT 4 DLL Search Path Weakness
No description provided by source. source: http://www.securityfocus.com/bid/1699/info When a program executes under Microsoft Windows, it may require additional code stored in DLL library files. These files are dynamically located at run time, and loaded if necessary. A weakness exists in the...
Benjamin Lefevre Dobermann Forum 0.x entete.php subpath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker...
FTP Desktop 3.5 Banner Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8559/info A buffer overflow vulnerability has been reported in FTP Desktop. The vulnerability occurs when FTP Desktop is parsing 'Welcome' banner 220 messages from remote FTP servers. When FTP Desktop receives an FTP bann...
Microsoft Internet Explorer 6.0 URL Local Resource Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Interne...
Microsoft IIS 2.0/3.0/4.0 ISAPI GetExtensionVersion() Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/501/info IIS and potentially other NT web servers have a vulnerability that could allow arbitrary code to be run as SYSTEM. This works because of the way the server calls the GetExtensionVersion function the first time an...
Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 FTP Server Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1411/info Certain versions of the LDAP-aware Netscape Professional Services FTP Server distributed with Enterprise Web Server have a serious vulnerability which may lead to a remote or local root compromise. The...
NAI Net Tools PKI Server 1.0 strong.exe Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1536/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a buffer overflow vulnerability which could lead to a remote compromise of the system running the PKI server...
AOL Instant Messenger 4.x Remote Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/3769/info AOL Instant Messenger AIM is a real time messaging service. The vulnerability exists in the way that AIM parses a game request with a TLV type, length, value type of 0x2711. This type of game request is prone to...
Simple Machines Forum <= 1.1.5 Admin Reset Password Exploit (win32)
No description provided by source. ?php echo ---------------------------------------------------------------\n; echo SMF = 1.1.5 Admin Reset Password Exploit win32-based servers\n; echo coded by Raz0r http://Raz0r.name/\n; echo ---------------------------------------------------------------\n; if...
Web Servers Malicious Encoding Directory Traversal
There exists a directory traversal vulnerability on multiple web servers. The vulnerability is due to an input validation error in the web server that does not properly sanitize directory traversal patterns...
Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities
Mailspect Control Panel version 4.0.5 suffers from remote code execution, arbitrary file read, and cross site scripting vulnerabilities. Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service...
CVE-2014-4643
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...
Heap overflow
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...
CVE-2014-4643
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...