CVE-2002-1244

Pablo FTP Server (versions 1.3 and 1.5, and possibly others) is affected by a format string vulnerability in the USER command due to incorrect handling of format string markers in user input. This can allow a remote attacker to cause a denial of service and, potentially, execute arbitrary code. T...

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure

BT Voyager 2000 Wireless ADSL Router - SNMP Community String Information Disclosure source: https://www.securityfocus.com/bid/10589/info BT Voyager 2000 Wireless ADSL Router is reported prone to a sensitive information disclosure vulnerability. It is reported that 'public' SNMP MIB community...

Invision Power Board 1.3 - 'SSI.php' SQL Injection

source: https://www.securityfocus.com/bid/10511/info Invision Power Board is reported prone to an SQL injection vulnerability in its 'ssi.php' script. Due to improper filtering of user supplied data, 'ssi.php' is exploitable by attackers to pass SQL statements to the underlying database. The impa...

Multiple CVS bugs

Buffer overflows, format strings, double free...

CVE-2004-1919

The hashstrcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service crash via large malformed strings...

CVE-2004-0329

CVE-2004-0329 affects FreeChat 1.1.1a. The issue allows remote attackers to trigger a denial-of-service crash by sending certain unexpected strings (demonstrated with “aaaaa”). According to the connected records, the vulnerability is exploitable over the network without authentication, but no con...

CVE-2004-0312

Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2...

SNMP information leak in Linksys

It's possible to retrieve all community strings...

Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration

source: https://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings may be disclosed to a remote...

SNMP community string disclosure in Linksys WAP55AG

Linksys WAP55AG does not properly secure SNMP community strings. In particular, it is possible to obtain all community strings, including read/write, by querying OID 1.3.6.1.4.1.3955.2.1.13.1.2. 1.3.6.1.4.1.3955.2.1.13.1.2.1 = STRING: "public" 1.3.6.1.4.1.3955.2.1.13.1.2.2 = STRING: "private"...

Microsoft ASN.1 Library improperly decodes constructed bit strings

Overview The Microsoft ASN.1 Library improperly decodes constructed bit strings which could allow an unauthenticated, remote attacker to execute arbitrary code with SYSTEM privileges. Description Abstract Syntax Notation number One ASN.1 is an international standard used to describe and transmit...

CVE-2004-0014

Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...

CVE-2004-0014

Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...

GEdit 2.0/2.2 - Large IOStream File Memory Corruption

// source: https://www.securityfocus.com/bid/9090/info A problem has been reported in the handling of certain file types by gEdit. Memory corruption may occur when handling files containing long strings. Because of this, it may be possible to cause memory corruption. / simple buffer overflow...

[SECURITY] [DSA 401-1] New hylafax packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 401-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2003 http://www.debian.org/security/faq -...

Compaq Web-enabled Management Software Default Account

The Compaq Web-based Management / HP System Management Agent active on the remote host is configured with the default, or a predictable, administrator password. Depending on the agents integrated, this allows an attacker to view sensitive and verbose system information, and may even allow more...

CVE-2003-0432

Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the 1 BGP, 2 WTP, 3 DNS, 4 802.11, 5 ISAKMP, 6 WSP, 7 CLNP, 8 ISIS, and 9 RMI dissectors...

Netsuite121.txt

Moby's Netsuite 1.21 Traversal Directory bugs Release Date: 13 July, 2003 Description: NetSuite is a freeware server suite that allows anyone with a static IP address the ability to run their own mail and web services. Note that you cannot reasonably run a web server from a normal dial-in account...

eXtremail 1.5.x (Linux) - Remote Format Strings

eXtremail 1.5.x Linux - Remote Format Strings // / Linux eXtremail 1.5.x Remote Format Strings Exploit / / / / / / By B-r00t - 02/07/2003 / / / / Versions: Linux eXtremail-1.5-8 = VULNERABLE / / Linux eXtremail-1.5-5 = VULNERABLE / / Exploit uses format strings bug in fLog of smtpd to bind a / /...

Linksys BEFVP4 - SNMP Community String Information Disclosure

source: https://www.securityfocus.com/bid/7317/info Linksys BEFVP4 VPN router has been reported prone to a sensitive information disclosure vulnerability. It has been reported that SNMP community strings which, are world readble by default, contain sensitive information pertaining to the internal...