315 matches found
POP3 Service STLS Plaintext Command Injection
The remote POP3 service contains a software flaw in its STLS implementation that could allow a remote, unauthenticated attacker to inject commands during the plaintext protocol phase that will be executed during the ciphertext protocol phase. Successful exploitation could allow an attacker to ste...
postfix -- plaintext command injection with SMTP over TLS
Wietse Venema has discovered a software flaw that allows an attacker to inject client commands into an SMTP session during the unprotected plaintext SMTP protocol phase, such that the server will execute those commands during the SMTP- over-TLS protocol phase when all communication is supposed to...
Apple iPhone memory corruption
Memory corruption on SMS messages parsing...
Design/Logic Flaw
WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party 1 FTP and 2 CIFS servers, which makes it easier for remote attackers to trick a user into sending...
canvas functions can reveal data from random places in memory
There is a flaw in the way that certain canvas functions are handled, that can cause the canvas to be painted with very small amounts of data constructed from random memory. The resulting canvas image can be read and analyzed by JavaScript, so an attacker can get random samples of the user's...
CVE-2008-5110
syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. NOTE: this is only a vulnerability when a separate vulnerability is present. This flaw affects syslog-ng versions prior to and including 2.0.9...
emc-sql.txt
adMERITia Vulnerability Report Vulnerability Information Vendor: EMC² Product: Centera Universal Access Version: CUA4.04735.p4 Vulnerability Type: Software Flaw Vulnerability: SQL Injection Impact: Attacker can bypass the authentication method and will be logged in as an arbitrary user. With...
IRM Advisory: Cisco IOS LPD Remote Stack Overflow
---------------------------------------------------------------------- IRM Security Advisory 024 Cisco IOS LPD Remote Stack Overflow Vulnerability Type / Importance: Remote Code Execution / High Problem Discovered: 30 July 2007 Vendor Contacted: 30 July 2007 Advisory Published: 10 October 2007...
CVE-2006-2575
The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service crash via a client flag frameNum that is greater than 41, which triggers an assert error...
Neon Responder (Dos,Exploit)
Author: Stefan Lochbihler Date: 17.04.2006 Affected Software: Neon Responder for Windows Software 5.4 Software http://www.neon.com/NRwin.shtml Attack: Dos Overview: Neon Responders greatly enhance the functionality of LANsurveyor by providing LANsurveyor with direct access to computers with the...
CVE-2006-1724
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attack vectors related to DHTML...
Absolute Live Support XE V2.0 XSS vuln.
Absolute Live Support XE V2.0 XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor:http://www.xigla.com/absolutels/index.htm affected versions:V2.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html Vuln. Description: Absolute Live...
Magic List pro 2.5 SQL inj. vuln.
Magic List pro 2.5 SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html vendor:www.cfmagic.com/products/magiclistpro.cfm affected version:2.5 Product Description: Magic List Pro is our full-featured opt-...
[SA16143] dxxo Count Web Statistics SQL Injection Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
ngIRCd Internet Relay Chat server integer overflow
Integer overflow in ListsMakeMask leads to buffer overflow...
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...
CESA-2004-004: qt
CESA-2004-004 - rev 3 http://scary.beasts.org/security/CESA-2004-004.txt qt 3.3.2 BMP parser heap overflow error ======================================= Programs: qt, and any programs which use qt to decode BMP files. For example, KDE including konqueror. Severity: Possible compromise of account...
NetSupport School 7.0/7.5 - Weak Password Encryption
source: https://www.securityfocus.com/bid/9981/info NetSupport School is prone to a password-encryption vulnerability because the application fails to protect passwords with a sufficiently effective encryption scheme. Exploiting this issue may allow an attacker to access user and administrator...
Vulnerability in OpenSSL CVE-2003-0851
A flaw in OpenSSL 0.9.6k only would cause certain ASN.1 sequences to trigger a large recursion. On platforms such as Windows this large recursion cannot be handled correctly and so the bug causes OpenSSL to crash. A remote attacker could exploit this flaw if they can send arbitrary ASN.1 sequence...
