2659 matches found
Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow
Lotus Domino Enterprise Server 5.0.15.0.25.0.3 Mail Server 5.0.15.0.25.0.3 - Remote Buffer Overflow Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: https://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' an...
Дырка в Web-counter'e counterfiglet
Вызов system с непроверяемым на shell-метасимволы вводом пользователя позволяют выполнить любое приложение на сервере, например http://web-server/cgi-bin/counterfiglet/nc/f=;echo;w;uname20-a;id...
bugzilla.txt
Advisory: Unchecked systemblaat $var blaat call in Bugzilla 2.8 Root66 - ShellOracle - b0f By - [email protected] / Introduction / Bugzilla is a database for bugs. It let's people report bugs and assigns these bugs to the appropriate developers. Developer s can use bugzilla to keep a to-do...
BizDB bizdb-search.cgi Arbitrary Command Execution
BizDB is a web database integration product using Perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the web server. The variable is dbname, and if passed a semicolo...
3R Soft MailStudio 2000 2.0 - 'userreg.cgi' Arbitrary Command Execution
// source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI, thereby compromising the confidentiality of other...
CNC Technology BizDB 1.0 - 'bizdb-search.cgi' Remote Command Execution
source: https://www.securityfocus.com/bid/1104/info BizDB is a web databse integration product using perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the webserver...
NetWin DNews 5.3 Server - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/1172/info DNews News Server is a CGI application that gives access to auser's NNTP server over the web. There are many unchecked buffers in the program, some of which can be exploited directly from any browser. Supplying an overlylong value for the "group...
A-V Tronics InetServ 3.0 - WebMail GET
A-V Tronics InetServ 3.0 - WebMail GET / source: https://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that...
A-V Tronics InetServ 3.0 - WebMail GET
/ source: https://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that parses the GET requests, and a request o...
NullSoft Winamp 2.10 - Playlist
NullSoft Winamp 2.10 - Playlist / source: https://www.securityfocus.com/bid/925/info Winamp, a program for playing mp3 and other audio files, uses playlist files .pls to store lists of files for playback. The code that reads these files has an unchecked buffer which can be overflowed to cause...
analogx.www.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy New Year! to All!! Local / Remote GET Buffer Overflow Vulnerability in AnalogX SimpleServer:WWW HTTP Server v1.1 USSR Advisory Code: USSR-99029 Release Date: December 31, 1999 5/5 not the original one, original 5/5 will be released 15/01/1900 :...
Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service
Alt-N WorldClient Pro 2.0.0.02.0.1.0Standard 2.0.0.0 - Long URL Denial of Service source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buff...
Alt-N MDaemon 2.8.5 - WebConfig Overflow Denial of Service
Alt-N MDaemon 2.8.5 - WebConfig Overflow Denial of Service source: https://www.securityfocus.com/bid/820/info The Mdaemon mail server for Windows includes a small web server for web-based remote administration. This webserver is vulnerable due to an unchecked buffer that handles incoming GET...
ETL Delegate 5.9.x6.0.x - Remote Buffer Overflow
ETL Delegate 5.9.x6.0.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/808/info The Delegate proxy server from ElectroTechnical Laboratory has numerous several hundred, according to the orignal poster unchecked buffers that could be exploited to remotely compromise the...
ETL Delegate 5.9.x/6.0.x - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/808/info The Delegate proxy server from ElectroTechnical Laboratory has numerous several hundred, according to the orignal poster unchecked buffers that could be exploited to remotely compromise the server. / delefate.c delegate 5.9.x - 6.0.x remote...
MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow
MediaHouse Software Statistics Server 4.285.1 - Server ID Buffer Overflow source: https://www.securityfocus.com/bid/734/info The web interface for Statistics Server contains an unchecked buffer which accepts input from the "Server ID" field of the login webpage. While the login webpage has a 16...
[SECURITY] New versions of smtp-refuser fixes security hole
This bug was experienced in May 1999 but wasnt reported on this channel yet. Former versions of the smtp-refuser package came with unchecked logging facility to /tmp/log. This allowed deleting arbitrary, root-owned files by any user who has write access to /tmp. We recommend you upgrade your...
CVE-2014-125043
A vulnerability, which was classified as problematic, has been found in vicamo NetworkManager. Affected by this issue is the function sendarps of the file src/devices/nm-device.c. The manipulation leads to unchecked return value. The name of the patch is 4da19b89815cbf6e063e39bc33c04fe4b3f789df. ...
