Mozilla SOAPParameter Object Constructor Overlow

The Mozilla web browser is installed on the remote host. The remote version of this software has an integer overflow vulnerability in the SOAPParameter object constructor. This could result in arbitrary code execution. A remote attacker could exploit this flaw by tricking a user into viewing a...

[Full-Disclosure] [Fwd: DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability]

DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability ========================================================================== Original Release Date: 2004-07-29 Author: Ruben Molina a.k.a fradiavolo Email: [email protected] !!! VIVA COLOMBIA !!! 1. Systems affected: All...

CVS Client Traversal Arbitrary File Retrieval

According to its version number, the remote CVS server has a directory directory traversal vulnerability. This could allow a malicious client to read files outside of the CVS root. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12212; scriptversion "1.16";...

Helix RealServer HTTP GET Request DoS

The remote host is running a version of RealServer that is vulnerable to a remote Denial of Service attack/ The issue is caused when a malformed GETPARAMETER or DESCRIBE request is sent to the server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12210;...

HAHTsite Scenario Server fails to handle overly long URLs

Overview HAHTsite Scenario Server fails to properly handle HTTP requests containing an overly long "project name". Description HAHTsite Scenario Server is an e-Business platform that consists of a web application server and web development environment. There is a buffer overflow vulnerability in...

Scorched 3D server chat box format string vulnerability

Background Scorched 3D is a game based loosely on the classic DOS game "Scorched Earth". Scorched 3D adds amongst other new features a 3D island environment and LAN and internet play. Scorched 3D is totally free and is available for multiple operating systems. Description Scorched 3D build 36.2 a...

Multiple Security Vulnerabilities in Monit

Background Monit is a system administration utility that allows management and monitoring of processes, files, directories and devices on a Unix system. Description A denial of service may occur due to Monit not sanitizing remotely supplied HTTP parameters before passing them to memory allocation...

Ethereal fails to properly decode Transaction IDs within TCAP packets

Overview Ethereal contains a vulnerability in the way the Transaction Capabilities Application Part TCAP protocol dissector parses ASN.1 encoded Transaction IDs within TCAP packets. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing TC...

Serv-U SITE CHMOD Command Multiple Vulnerabilities

The remote host is running Serv-U FTP Server. There is a bug in the way the server handles arguments to the SITE CHMOD requests that could allow an attacker to trigger a buffer overflow or corrupt memory in the server and disable it remotely or to potentially execute arbitrary code on the host...

KDE Personal Information Management suite "kdepim" contains a buffer overflow vulnerability in VCF information reader

Overview KDE Personal Information Management suite "kdepim" contains a buffer overflow vulnerability. Exploitation of this vulnerability could lead to the arbitrary execution of commands. Description KDE Personal Information Management suite shipped with KDE versions 3.1.0 through 3.1.4 contains ...

[SST]ServU MDTM command remote buffero verflow adv

Serv-U Ftp Server Long Filename Stack Overflow Vunlnerablity Application: Serv-U Affected Versions: All versions prior 4.2 include 4.1.0.11 Vendor: RhinoSoft http://www.rhinosoft.com http://www.serv-u.com URL: http://www.0x557.org/release/servu.txt Vunlnerablity: An internal memory buffer may be...

Low: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix two minor security issues in the Apache Web server are now available for Red Hat Enterprise Linux 3. The Apache HTTP Server is a powerful, full-featured, efficient, and freely-available Web server. An issue in the handling of regular expressions from configuration...

Flash Player < 7.0.19.0 Predictable Data Location Weakness

The remote host is running a version of Flash Player older than 7.0.19.0. Such versions can be abused in conjunction with several flaws in the web browser to read local files on an affected system. To exploit this issue, an attacker would need to lure a user of the software into visiting a rogue...

thttpd 2.2x - defang Remote Buffer Overflow

thttpd 2.2x - defang Remote Buffer Overflow // source: https://www.securityfocus.com/bid/8906/info A vulnerability has been reported in thttpd that may allow a remote attacker to execute arbitrary code on vulnerable host. The issue is reported to exist due to a lack of bounds checking by software...

Les Visiteurs Multiple Remote File Inclusion

The remote 'Les Visiteurs' PHP scripts are vulnerable to a bug wherein any anonymous user can force the server to redirect to any arbitrary IP and download a potentially malicious include file. This can allow an attacker to upload and execute malicious code on the web server. %NASLMINLEVEL 70300 ...

Important: Red Hat Security Advisory: : Updated MySQL packages fix vulnerability

Updated MySQL server packages fix a buffer overflow vulnerability. MySQL is a multi-user, multi-threaded SQL database server. Frank Denis reported a bug in unpatched versions of MySQL prior to version 3.23.58. Passwords for MySQL users are stored in the Password field of the user table. Under thi...

Dropbear SSH Server Username Remote Format String

The remote host is runnning Dropbear SSH. There is a format string vulnerability in all versions of the Dropbear SSH server up to and including version 0.34. An attacker may use this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc";...

Linux 2.4 NFSv3 knfsd Malformed GETATTR Request Remote DoS

The remote host is running knfsd, a kernel NFS daemon. There is a vulnerability in this version that may allow an attacker to cause a kernel panic on the remote host by sending a malformed GETATTR request with an invalid length field. C Tenable Network Security, Inc. include"compat.inc"; if...

PostNuke < 0.7.2.3 Multiple Script XSS

The remote host is running a version of PostNuke that is vulnerable to various cross-site scripting attacks. An attacker may use these flaws to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Dune Web Server GET Request Remote Overflow

The remote host is running a version of the Dune Web server that is older than 0.6.8. There is a flaw in this software that could be exploited by an attacker to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...