3798 matches found
Microsoft Word Malformed Document Font Processing Buffer Overflow Vulnerability
Description Microsoft Word is affected by a remote buffer overflow vulnerability. This vulnerability presents itself when a .doc file contains specific malformed input. Upon attempting to read the malformed .doc file, the affected application fails to properly validate data within the file. This...
[SECURITY] [DSA 748-1] New ruby1.8 packages fix arbitrary command execution
------------------------------------------------------------------------ Debian Security Advisory DSA 748-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 737-1] New clamav packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory DSA 737-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
Microsoft Internet Explorer PNG images buffer overflow
Heap overflow on large specific PNG chunk...
CVE-2004-1800
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie...
Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow
source: https://www.securityfocus.com/bid/12919/info Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'envoptadd' function in the 'telnet.c' source file, which is apparently common source for all...
NotifyLink contains multiple SQL injection vulnerabilities
Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...
webconnect.pl
WebConnect version 6.4.4 - 6.5 Proof of Concept Coded bY ++Karak0rsan++ [email protected] Usage:perl webconnect.pl target port Default port: 2080 Greetz:hurby,phalaposher,r3db4r0n,L4M3R,zeronc,Atak,sloan,emre, fox and all my friends Konak Anatolian High School - Prep/C Class Sen kendini...
vBulletin <= 3.0.4 ""forumdisplay.php"" Code Execution (part 2)
No description provided by source. ?php / vbulletin 3.0.x execute command by AL3NDALEEB al3ndaleebatuk2.net First condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. Second condition: $bbuserinfo'userid' == 0 , you must be an visitor/guest...
[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...
DSA-679-1 toolchain-source - insecure temporary files
Bulletin has no description...
[SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 678-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...
DEBIAN-CVE-2004-0960
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service core dump via malformed USR vendor-specific attributes VSA that cause a memcpy operation with a -1 argument...
CVE-2004-0960
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service core dump via malformed USR vendor-specific attributes VSA that cause a memcpy operation with a -1 argument...
Debian DSA-659-1 : libpam-radius-auth - information leak, integer underflow
Two problems have been discovered in the libpam-radius-auth package, the PAM RADIUS authentication module. The Common Vulnerabilities and Exposures Project identifies the following problems : - CAN-2004-1340 The Debian package accidentally installed its configuration file /etc/pamradiusauth.conf...
[Full-Disclosure] Novell GroupWise WebAccess error modules loading
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear ladies and gentlemen We have found a potential security vulnerability in the Novell GroupWise WebAccess error module handling. First of all it is possible to circumvent the login procedure. If a user connects to...
Halo 1.05 - Broadcast Client Crash
Halo 1.05 - Broadcast Client Crash / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case...
smbd -- buffer-overrun vulnerability
Caused by improper bounds checking of certain trans2 requests, there is a possible buffer overrun in smbd. The attacker needs to be able to create files with very specific Unicode filenames on the share to take advantage of this issue...
