815 matches found
security flaw
Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapiheaderop function...
security flaw
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...
PT-2007-2015 · Postgresql +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.3 through 7.3.12 PostgreSQL versions 7.4 through 7.4.15 PostgreSQL versions 8.0 through 8.0.10 PostgreSQL versions 8.1 through 8.1.6 PostgreSQL versions 8.2 through 8.2.1 Description: The issue allows attackers to disabl...
local to local copy uses shell expansion twice
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice...
Subdreamer 2.2.1 - SQL Injection / Command Execution
!/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
DEBIAN-CVE-2005-1275
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service application crash via a PNM file with a small colors value...
CVE-2002-1138
Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine MSDE 1.0 and Microsoft Desktop Engine MSDE 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File...
pMachine.txt
Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...
[LoWNOISE] Tomcat 3.2.1 ..0 DoS (WinNT)
-- LoWNOISE Aug/2001 -- Jakarta-Tomcat v3.2.1 Maybe Others Tested on: Apache 1.3.19 WinNT 4.0 The Problems: --Path Revealing and Method discovery Example: http://host/index.jsp Error: 500 Location: /index.jsp Internal Servlet Error: org.apache.jasper.JasperException: Unable to compile class for J...
[SECURITY] New version of nis released
Package : nis Problem type : local exploit Debian-specific: no The version of nis as distributed in Debian GNU/Linux 2.1 and 2.2 contains an ypbind package with a security problem. ypbind is used to request information from a nis server which is then used by the local machine. The logging code in...
[SECURITY] New verion of dhcp released (updated)
Package: dhcp-client-beta dhcp-client Vulnerability type: remote root exploit Debian-specific: no The versions of the ISC DHCP client in debian 2.1 slink and debian 2.2 potato are vulnerable to a root exploit. The OpenBSD team reports that the client inappropriately executes commands embedded in...
[SECURITY] New version of canna released.
Package : canna Problem type : remote exploit Debian-specific: no The canna package as distributed in Debian GNU/Linux 2.1 can be remotely exploited to gain access. This could be done by overflowing a buffer by sending a SRINIT command with a very long usernamd or groupname. This has been fixed i...
PT-1996-1042 · Xmcd · Xmcd
Name of the Vulnerable Software and Affected Versions: xmcd version 2.1 Description: A buffer overflow issue exists, allowing local users to gain access through a user resource setting. Recommendations: For version 2.1, at the moment, there is no information about a newer version that contains a...
