CVE-2003-0951

Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...

Opera Directory Traversal in Internal URI Protocol (Advisory)

Opera Web Browser Directory Traversal in Internal URI Protocol ============================================================== I ABSTRACT: Opera Web Browser defines an internal URI Protocol like command called "opera:". Among other things, it is used to display documentation and help files for the...

BEA Tuxedo 6/7/8 and WebLogic Enterprise 4/5 - Input Validation

source: https://www.securityfocus.com/bid/8931/info A vulnerability has reported to exist in BEA Tuxedo and WebLogic Enterprise due to Tuxedo administration console. The script is reported to accept various initialization arguments such as INIFILE that are not properly sanitized for user-supplied...

Happymall E-Commerce Remote Command Execution

Advisory URL: http://securitytracker.com/alerts/2003/May/1006707.html Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 Title: Happymall E-Commerce Input Validation Flaw Lets Remote Users Execute Arbitrary Commands Description: Revin Aldi reported an input validation vulnerability in the...

unhappycgi.txt

Advisory URL: http://securitytracker.com/alerts/2003/May/1006707.html Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 Title: Happymall E-Commerce Input Validation Flaw Lets Remote Users Execute Arbitrary Commands Description: Revin Aldi reported an input validation vulnerability in the...

PHP-Nuke 5.6/6.x News Module - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/7173/info It has been reported that an input validation error exists in the index.php file included with PHPNuke as part of the News module. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker to...

qpopper timing analysis on to determine if a username exists on a system

Hello, during development of a pop3 tool I found an issue that makes it possible for any user to check the validity of a user on a target system. If a user is valid and an invalid password has been supplied, then the system waits 10 seconds until it sends a disconnect message and disconnect. If t...

UPDATE: Microsoft Security Bulletin MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (Q329115)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Certificate Validation Flaw Could Enable Identity Spoofing Q329115 Released: 04 September 2002 Revised: 20 November 2002 version 4.0 Software: Microsoft Windows, Microsoft Office for...

MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (328145)

The remote host contains a version of the CryptoAPI that could allow an attacker to spoof the identity of another user with malformed SSL certificates. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11145; scriptversion"1.49"; scriptcvsdate"Date: 2018/11/15 20:50:29"...

CVE-2002-0867

Microsoft Virtual Machine VM up to and including build 5.0.3805 allows remote attackers to cause a denial of service crash in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."...

Savant Web Server 3.1 - File Disclosure

source: https://www.securityfocus.com/bid/5709/info Savant Webserver is vulnerable to an input validation bug, that could allow malicious users access to password protected folders. It should be noted that versions below 3.1 may also be vulnerable to this issue. http://host/passwordfolder. "GET...

Security Bulletin MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)

---------------------------------------------------------------------- Title: Certificate Validation Flaw Could Enable Identity Spoofing Q328145 Date: September 04, 2002 Software: Microsoft Windows, Microsoft Office for Mac, Microsoft Internet Explorer for Mac, or Microsoft Outlook Express for...

File send interception in AIM

Durig file trasmitio icomig connection is accepted without additioal user or IP validation...

Add2it Mailman command execution

!/exploit/by/b0iler Add2it Mailman Free V1.73 script url: http://www.add2it.com/scripts/mailman-free.shtml The problem is that the script does not filter input well: $command = $ENV'QUERYSTRING'; $list, $email = split/=/,$command; and then the script makes an open call based on input from the use...

New getAccess[tm] Vulnerability

Good Morning Listmembers, this is another postingsee 1st here http://www.securityfocus.com/bid/3109 about Entrust s "getAccesstm" product Problem Description: "getAccesstm" still uses default shellscripts which start java-classes for their web-applications. due to missing input-validation it is...

Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below

note to editors: please leave all links intact. Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below found and written by: [email protected] http://www.modernhacker.com phpBB, is an open source bulletin board created by the phpBB group phpbb.com . Versions 1.4.0 and belo...

SuSE 6.3/6.4/7.0 sdb - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/3208/info An input validation error exists in sdb, the SuSE Support Data Base. The problem exists in the sdbsearch.cgi script, which uses data directly from the 'Referer' header field from a HTTP request as a path when opening it's "keylist.txt" file. The...

SSH2 3.0 - Short Password Login

source: https://www.securityfocus.com/bid/3078/info An input validation error exists in version 3.0.0 of the SSH daemon sshd running on Unix platforms. It may be possible for remote users to log in to accounts for which there are two or less characters in the password field of the system password...

Cosmicperl Directory Pro 2.0 - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/2793/info Webdirectory Pro is a web application used to create a searchable directory of links developed by Cosmicperl. Webdirectory Pro contains an input validation vulnerability which may lead to disclosure of sensitive information to attackers. The val...

Caucho Technology Resin 1.2/1.3 - JavaBean Disclosure

source: https://www.securityfocus.com/bid/2533/info A specially constructed HTTP request could enable a remote attacker to gain read access to any known JavaBean file residing on a host running Resin. On Resin webservers, JavaBean files reside in a protected directory, '/WEB-INF/classes/'...