3537 matches found
USN-222-1: Perl vulnerability
Jack Louis of Dyad Security discovered that Perl did not sufficiently check the explicit length argument in format strings. Specially crafted format strings with overly large length arguments led to a crash of the Perl interpreter or even to execution of arbitrary attacker-defined code with the...
CVE-2005-3803
Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...
CVE-2005-3803
Cisco IP Phone 7920 (VoIP) 1.0(8) is affected by hard-coded public and private SNMP community strings that cannot be changed, enabling potential remote information disclosure. The issue is documented across NVD/Nessus and Cisco advisories, with a vendor alert suggesting that fixed SNMP communitie...
PT-2005-4554 · Cisco · Cisco Ip Phone 7920
Name of the Vulnerable Software and Affected Versions: Cisco IP Phone VoIP 7920 version 1.08 Description: The issue concerns hard-coded public and private SNMP community strings that cannot be changed, allowing remote attackers to obtain sensitive information. Recommendations: For Cisco IP Phone...
InterScan VirusWall Remote Configuration Vulnerability
The management interface used with the Interscan VirusWall uses several cgi programs that may allow a malicious user to remotely change the configuration of the server without any authorization using maliciously constructed querystrings. SPDX-FileCopyrightText: 2001 INTRANODE Some text descriptio...
VERITAS-Linux.pl.txt
!/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ This exploit May NOT be posted to a public Archive like k-otik without being in its original GPG for...
CVE-2004-2505
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service memory consumption and crash by sending repeated GET or POST requests that trigger error messages that use long strings of data...
Veritas NetBackup 6.0 (OSX) - 'bpjava-msvc' Remote Command Execution
!/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX BINDSHELLCODE PORT=5557 NO-0x0 /...
Veritas NetBackup 6.0 (Linux) - 'bpjava-msvc' Remote Command Execution
!/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; use strict; print STDERR "\nveritas.pl - VERITAS NetBacku...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (linux)
Exploit for multiple platform in category remote exploits ============================================================= Veritas NetBackup \n\n"; exit 1; my $hostName = $ARGV0; my $port = $ARGV1 || 13722; buildexploit $hostName, $port; my $shellport = 5570; print " Connect to remote shell port\n";...
Veritas NetBackup 6.0 (Linux) - bpjava-msvc Remote Command Execution
Veritas NetBackup 6.0 Linux - bpjava-msvc Remote Command Execution !/usr/bin/perl VERITAS-Linux.pl - VERITAS NetBackup Format Strings Linux/x86 Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use...
RHEL 2.1 : binutils (RHSA-2005:763)
An updated binutils package that fixes minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were found in various...
CVE-2005-3150
Format string vulnerability in the LogFlush function in Weex 2.6.1.5, 2.6.1, and possibly other versions allows remote FTP servers to execute arbitrary code via format strings in filenames...
PT-2005-3043 · Gaim +1 · Gaim +1
Name of the Vulnerable Software and Affected Versions: Gaim versions prior to 1.5.0 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved by sending an away...
ProFTPD < 1.3.0rc2 Multiple Format Strings
Binary data 3113.prm...
CVE-2004-2264
Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...
CVE-2004-2237
Technical details for CVE-2004-2237 are not publicly available in the provided documents. Monitor for updates and expect future disclosures before any assessment of impact or remediation.
CVE-2004-2237
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."...
