4 matches found
HTTP Header Name Remote Format String
The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose name includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code ...
miniBB bb_func_usernfo.php Website Name Field XSS
The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a cross-site scripting bug. A remote attacker could exploit this to impersonate a legitimate user by tricking them into requesting a maliciously crafted URL. %NASLMINLEVEL 703...
FreeBSD-SA-00:22.apsfilter
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:22 Security Advisory FreeBSD, Inc. Topic: apsfilter allows users to execute arbitrary commands as user lpd Category: ports Module: apsfilter Announced: 2000-06-07 Credits...
RFP2K05 - NetProwler "Fragmentation" Issue
NetProwler 3.0 will crash if the Man-in-the-Middle signature encounters a packet for which the following expression evaluates to true: IPHEADERLENGTH + TCPHEADERLENGTH IPTOTALLENGTH This is not a packet fragmentation problem. It is an issue with specific malformed packets. This problem has been...