6294 matches found
AOL Instant Messenger 4.x - Arbitrary File Creation
AOL Instant Messenger 4.x - Arbitrary File Creation source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that...
CVE-2001-1495
networkquery.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter...
System V Derived /bin/login - Extraneous Arguments Buffer Overflow (modem based) (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'System V Derived...
BeroFTPD 1.3.4(1) (Linux x86) - Remote Code Execution
/ BeroFTPD 1.3.41 Linux x86 remote root exploit by qitest1 - 5/05/2001 BeroFTPD is an ftpd derived from wuftpd sources. This code exploits the format bug of the site exec cmd, well known to be present in wuftpd-2.6.0 and derived daemons. BeroFTPD 1.3.41 is the current version at the moment. JUST...
AOL Instant Messenger 3.5.1856/4.0/4.1.2010/4.2.1193 - 'aim://' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/2118/info AOL Instant Messenger AIM is a real time messaging service for users that are on line. When AOL Instant Messenger is installed, by default it configures the system so that the aim: URL protocol connects aim:// urls to the AIM client. There exist...
Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (9)
Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 9 /\ Microsoft IIS 4.0/5.0 Extended UNICODE Directory Traversal Exploit proof of theory exploit cuz it's wednesday and i'm on the couch brought to you by the letter B, the number 7, optyx, and t12 optyx - t12 - greetz go out to...
icq.greeting-card.txt
Hi, I don't know if this has been reported before. ICQ's Greeting Card service allow you to send message with HTML commands so you can crash target computer or run script codes. If you write this in message box target computer should be crash in 3 seconds. Meliksah Ozoral [email protected]...
NetcPlus SmartServer 3.5.1 - SMTP Buffer Overflow
NetcPlus SmartServer 3.5.1 - SMTP Buffer Overflow // source: https://www.securityfocus.com/bid/632/info There is a buffer overflow on the SmartServer3 SMTP service long MAIL FROM: that may allow an intruder to execute arbitrary code on the target server. 1 @Work SmartServer3...
FuseWare FuseMail 2.7 - POP Mail Buffer Overflow
FuseWare FuseMail 2.7 - POP Mail Buffer Overflow // source: https://www.securityfocus.com/bid/634/info There is a buffer overflow in the FuseMail POP service long USER,PASS that may allow an intruder to execute arbitrary code on the target server. FuseMail 2.7...
Microsoft NT 4.0 RAS/PPTP - Malformed Control Packet Denial of Service
source: https://www.securityfocus.com/bid/2111/info Quoted from a Microsoft FAQ, "Point-to-Point-Tunneling Protocol PPTP is a new networking technology that supports multiprotocol virtual private networks VPN, enabling remote users to access corporate networks securely across the Microsoft Window...
Slackware Linux 3.4 - liloconfig-color Temporary File
Slackware Linux 3.4 - liloconfig-color Temporary File source: https://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This...
PT-1998-1096 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows UDP messages to broadcast addresses, enabling a Fraggle attack. This can cause a denial of service by flooding the target. Recommendations: At the moment, there is ...
