4664 matches found
Vulnerability in contrib module (CVE-2005-1410)
The tsearch2 contrib module declares several functions as internal even though they don't take an internal argument. This allows attackers to cause a denial of service and may possibly have other impacts. A valid login is required to exploit this vulnerability.Note! See the announcement for speci...
CVE-2004-1414
Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service application hang via a message that contains many special strings that are converted to images...
Konversation KDE IRC client multiple vulnerabilities
Special characters filtering problem...
greed -- insecure GRX file processing
A buffer overflow vulnerability has been detected in the greed URL handling code. This bug can especially be a problem when greed is used to process GRX GetRight files that originate from untrusted sources. The bug finder, Manigandan Radhakrishnan, gave the following description: Here are the bug...
Multiple antivirii DoS
Creation of file with oversized path or special device name causes application to hang or allows detection bypassing. ZIP with zero archive length allow to bypass checking...
Sophos Small Business Suite special DOS devices access
By using special device name as a filename it's possible to access DOS device and bypass protection...
WhatsUp Gold special DOS device access
No description provided...
Ultraseek special DOS device access
Document path can contain special device name...
Kerio Personal Firewall DoS
Special characters in URL cause service to crash...
Character not allowed in user name
A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...
Character not allowed in user name
A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...
Character not allowed in user name
A user has sign up with the user name "m&m". The i tried to modify this user. Because the username is passed as url parameter FooServlet?name=m&m : GET or POST method the servlet container cut the name and try to retreive the username named "m" !!! The only way is to use a database client, change...
Norton Antivirus protection bypass
Files with special characters in path are not checked...
CVE-2003-0638: Undefined Security Weakness
Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service ABEND and possibly execute arbitrary code via 1 a long user name or 2 an unknown attack related to a "special script against login."...
InfoZip unzip directory traversal
Special characters in file name, skipped during extraction, allow to masquarade directory traversal...
AN HTTPd multiple bugs
Crossite scripting, physical path leakage, special devices access, file corruption...
Low: Red Hat Security Advisory: lynx security update
Updated Lynx packages fix an error in the way Lynx parses its command line arguments which can lead to faked headers being sent to a Web server. Lynx is a character-cell Web browser, suitable for running on terminals such as the VT100. Lynx constructs its HTTP queries from the command line or...
Buffer overflow in pine
Buffer overflow if address contains special characters...