5595 matches found
Fedora Core 3 : mailman-2.1.5-32.fc3 (2005-242)
A cross-site scripting XSS flaw in the driver script of mailman prior to version 2.1.5 could allow remote attackers to execute scripts as other web users. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-1177 to this issue. Users of mailman should upda...
Fedora Core 4 : slocate-2.7-22.fc4.1 (2005-770)
A carefully prepared directory structure could stop the updatedb file system scan, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2499 to this issue. Note that Tenable Network Security has extracted the preceding...
CVE-2004-2388
The vulnerability CVE-2004-2388 affects the AIX 4.3.3 rexecd component. It stems from not properly using a local copy of the pwd structure when calling getpwnam, allowing the authenticate function to overwrite the pwd data and potentially assign privileges to the wrong user. This creates a privil...
Hosting Controller 6.1 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/14258/info Hosting Controller is prone to an SQL injection vulnerability. This issue allows a remote attacker to manipulate query structure and logic. It has been reported that the attacker may gain unauthorized access to sensitive information. Other...
CVE-2005-2052
Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...
CVE-2005-2052
Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...
Stream / Raped Denial of Service Attack (win version)
Exploit for multiple platform in category dos / poc ===================================================== Stream / Raped Denial of Service Attack win version ===================================================== / Straped 1.0 author: Marco Del Percio 20/05/2005 Remember: this is a mulithreaded...
CVE-2005-0210
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...
CVE-2005-0210
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...
mtftpd <= 0.0.3 Remote Root Exploit
Exploit for linux platform in category remote exploits =================================== mtftpd include include include include include include ne...
CVE-2005-0210
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service memory consumption via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice...
Multiple applications fd_set structure bitmap array index overflow
Issue: Multiple applications fdset structure bitmap array index overflow Type: remote Date: December, 12 2004 Original URL: http://www.security.nnov.ru/advisiories/sockets.asp Author: 3APA3A URL: http://www.security.nnov.ru/ Affected: gnugk 2.2.0 confirmed, fixed by vendor gnugk is OpenH323...
multiple applications fd_set structure bitmap array index overflow
Issue: Multiple applications fdset structure bitmap array index overflow Type: remote Date: December, 12 2004 Original URL: http://www.security.nnov.ru/advisiories/sockets.asp Author: 3APA3A URL: http://www.security.nnov.ru/ Affected: gnugk 2.2.0 confirmed, fixed by vendor gnugk is OpenH323...
CVE-2004-2388
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user...
Disclosure of file system information in Mozilla Firefox and Opera Browser:
Title: Disclosure of file system information in Mozilla Firefox and Opera Browser Note: I don't know if it could be considered really a security problem, anyway i'll try to explain my ideas. Sorry for my bad english. Author: Giovanni Delvecchio Bug: Disclosure of file system information...
GD Graphics Library Heap Overflow Proof of Concept Exploit
No description provided by source. include stdio.h include sys/types.h include netinet/in.h include fcntl.h include string.h include unistd.h include stdlib.h include stdint.h include zlib.h define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx;...
GD Graphics Library - Local Heap Overflow
include include include include include include include include include define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx; exitEXITFAILURE;while0 / a chunk looks like: 4 byte len - just the length of data 4 byte id - identifies chunk data type 0+ data -...
GD Graphics Library Heap Overflow Proof of Concept Exploit
Exploit for linux platform in category local exploits ========================================================== GD Graphics Library Heap Overflow Proof of Concept Exploit ========================================================== include include include include include include include include...
freebsd/x86 connect 102 bytes
Exploit for freebsd/x86 platform in category shellcode ============================= freebsd/x86 connect 102 bytes ============================= ; Passive Connection Shellcode ; ; Coded by Scrippie - email protected - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades...