59 matches found
CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
CVE-2018-11645
Ghostscript (psi/zfile.c) before 9.21rc1 permits the status command even with -dSAFER, enabling remote attackers to determine the existence and size of arbitrary files. This CVE (CVE-2018-11645) is referenced in multiple advisories; upstream context ties it to Ghostscript’s handling of SAFER and ...
CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
UBUNTU-CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
CVE-2018-11645: Exposure of Sensitive Information to an Unauthorized Actor
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
CVE-2018-11645
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...
NS_ASG 6.3 /device_status.php 命令执行漏洞
No description provided by source...
MailEnable IMAPD 1.54 - STATUS Request Buffer Overflow (Metasploit)
$Id: mailenablestatus.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
MailEnable IMAPD (1.54) STATUS Request Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MailEnable...
CVE-2004-2292: Undefined Security Weakness
Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service application crash via a long STATUS command to the IMAP server...
CVE-2005-2278: Undefined Security Weakness
Stack-based buffer overflow in the IMAP daemon imapd in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name...
MailEnable IMAP STATUS Command Remote Overflow
Binary data 3068.prm...
CVE-2005-1256
Stack-based buffer overflow in the IMAP daemon IMAPD32.EXE in IMail 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name...
CVE-2004-1525: Undefined Security Weakness
Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service application crash via the status command...
PT-2003-1865 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP versions 3 and 4 Description: The issue allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via long arguments, specifically the APPE append or STAT status arguments. Recommendations: For ...
CVE-2000-0646: Undefined Security Weakness
WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS STAT command while the file is being transferred...