2869 matches found
Winamp < 5.0.8c Multiple Unspecified Vulnerabilities
The version of Winamp installed on the remote host has various unspecified vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. An attacker may exploit these flaws by sending malformed files to a victim on the remote host. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-2386
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function...
CVE-2004-1383
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the 1 order, 2 projectid, 3 promain, or 4 hoursid parameters to index.php or 5 ticketid to viewticketdetails.php...
[SA13468] Ethereal Multiple Vulnerabilities
TITLE: Ethereal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13468 VERIFY ADVISORY: http://secunia.com/advisories/13468/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Ethereal 0.x http://secunia.com/product/1228/ DESCRIPTION: Multiple vulnerabilities have be...
PHPKIT SQL Injection, XSS
Author: Steve Date: November 22, 2004 Affected Software:PHP KIT Software Version: 1.6.03 - 1.6.1 Software URL: http://www.phpkit.de Attack: SQL Injection, allowing people to manipulate the query into pulling data. XSS What is PHPKIT: PHPKIT is a modular developed Homepage Software which can simpl...
Debian DSA-202-1 : im - insecure temporary files
Tatsuya Kinoshita discovered that IM, which contains interface commands and Perl libraries for E-mail and NetNews, creates temporary files insecurely. - The impwagent program creates a temporary directory in an insecure manner in /tmp using predictable directory names without checking the return...
Debian DSA-281-1 : moxftp - buffer overflow
Knud Erik Hojgaard discovered a vulnerability in moxftp and xftp respectively, an Athena X interface to FTP. Insufficient bounds checking could lead to execution of arbitrary code, provided by a malicious FTP server. Erik Tews fixed this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[VulnWatch] OpenBSD radius authentication vulnerability
Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...
Cisco VPN 3000 Concentrator Multiple Service Banner System Information Disclosure (CSCdu35577 HTTP Check)
The remote VPN concentrator gives out too much information in application layer banners. An incorrect page request provides the specific version of software installed. This vulnerability is documented as Cisco bug ID CSCdu35577. %NASLMINLEVEL 70300 This script was written by Michael J. Richardson...
[SA12374] ignitionServer "SERVER" Denial of Service Vulnerability
TITLE: ignitionServer "SERVER" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12374 VERIFY ADVISORY: http://secunia.com/advisories/12374/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: ignitionServer 0.3.x http://secunia.com/product/3565/ ignitionServer 0.2.x...
Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities
Binary data 1996.prm...
wdExec.txt
Williams Database Page Parser File: page.pl Version: 1.0 Author: Neil Thompson Web: www.williamsdb.com Exploit: www.host.com/page.pl?page=|id| ThankS All : Infektion Group...
12Planet Chat Server 2.9 - Cross-Site Scripting
12Planet Chat Server 2.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10659/info It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data. The problem presents itself when...
Linksys Web Camera Software 2.10 - 'Next_file' File Disclosure
source: https://www.securityfocus.com/bid/10476/info It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files. Linksys Web Camera software version 2.10 is reportedly prone to this issue, however...
NetChat HTTP Server Stack Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetChat HTTP Server Stack Overflow RELEASE DATE: May 16, 2004 DATE REPORTED: May 12, 2004 RISK: Medium IMPACT: Attackers may be able to execute arbitrary code with the privileges of the user running the applicaton. VERSIONS: = 7.3 OVERVIEW: NetChat is...
Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection
Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issue...
Clients broadcast buffer overflow in Red Faction <= 1.20
Luigi Auriemma Application: Red Faction http://www.redfaction.com Versions: = 1.20 Platforms: Windows, MacOS Bug: broadcast client buffer overflow Risk: highly critical Exploitation: remote and automatic, versus clients Date: 01 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
Invision Power Board (IP.Board) < 1.3 - SQL Injection
IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage of...
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...
LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service
LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote...