Lucene search
+L

370 matches found

Packet Storm
Packet Storm
added 2005/10/30 12:00 a.m.32 views

vCard29.txt

Remote File Inclusion in :- -------------------------- vCard Date :- ------ 26/10/2005 version :- --------- 2.9 The bug reside in :- ------------------- define.inc.php And error in :- -------------- online.inc.php search google :- --------------- powered by vCard 2.9 & allinurl:vCard Exploit :-...

7.4AI score
SaveExploits0
NVD
NVD
added 2005/10/27 10:02 a.m.22 views

CVE-2005-3332

PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter...

7.5CVSS7.6AI score0.02309EPSS
SaveExploits2References1
NVD
NVD
added 2005/10/27 10:02 a.m.29 views

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

9.3CVSS7.8AI score0.0587EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2005/10/27 4:00 a.m.30 views

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

7.7AI score0.0587EPSS
SaveExploits0References8
CVE
CVE
added 2005/10/27 4:00 a.m.61 views

CVE-2005-3332

Vulnerability (CVE-2005-3332) in Belchior Foundry’s vCard 2.9: PHP remote file include in admin/define.inc.php allows an attacker to execute arbitrary PHP code via the match parameter. Multiple sources (NVD, Red Hat advisory, Nessus plugin) corroborate the flaw and impact. Affected software is th...

7.5CVSS7.6AI score0.02309EPSS
SaveExploits2References1Affected Software1
exploitpack
exploitpack
added 2005/10/26 12:00 a.m.18 views

Belchior Foundry VCard 2.9 - Remote File Inclusion

Belchior Foundry VCard 2.9 - Remote File Inclusion source: https://www.securityfocus.com/bid/15207/info vCard is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute...

SaveExploits0
Exploit DB
Exploit DB
added 2005/10/26 12:00 a.m.24 views

Belchior Foundry VCard 2.9 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15207/info vCard is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer...

7.5CVSS5.8AI score0.02309EPSS
SaveExploits2
CERT
CERT
added 2005/10/26 12:00 a.m.34 views

Skype VCARD handling routine contains a buffer overflow

Overview A buffer overflow in the way Skype handles imported VCARDs may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. Skype fails to properly validate imported VCARDs, allowing a buffer overflow to occur. Th...

9.3CVSS7.5AI score0.0587EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2005/10/05 12:00 a.m.23 views

Mandrake Linux Security Advisory : evolution (MDKSA-2005:141)

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers. CVE-2005-2549 A format...

7.5CVSS6.1AI score0.04426EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2005/10/05 12:00 a.m.39 views

SUSE-SA:2005:054: evolution

The remote host is missing the patch for the advisory SUSE-SA:2005:054 evolution. Several format string bugs allowed remote attackers to cause evolution to crash or even execute code via full vCard data, contact data from remote LDAP servers, task list data from remote servers CVE-2005-2549 or...

7.5CVSS5.8AI score0.04426EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2005/08/29 6:30 p.m.8 views

security flaw

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS6.2AI score0.04426EPSS
SaveExploits0References4
CVE
CVE
added 2005/08/12 4:00 a.m.85 views

CVE-2005-2549

Evolution contains multiple format string vulnerabilities that can crash the application or allow arbitrary code execution via remote data sources. The CVE-2005-2549 entry covers vulnerabilities triggered by: (1) full vCard data, (2) contact data from remote LDAP servers, and (3) task list data f...

7.5CVSS7.6AI score0.04426EPSS
SaveExploits0References13Affected Software1
UbuntuCve
UbuntuCve
added 2005/08/12 4:00 a.m.25 views

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS6.3AI score0.04426EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2005/08/12 4:00 a.m.44 views

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS7.5AI score0.04426EPSS
SaveExploits0
Cvelist
Cvelist
added 2005/08/12 4:00 a.m.25 views

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.6AI score0.04426EPSS
SaveExploits0References13
OSV
OSV
added 2005/08/12 4:00 a.m.11 views

DEBIAN-CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS7.7AI score0.04426EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2005/08/11 10:26 p.m.50 views

USN-166-1: Evolution vulnerabilities

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

5CVSS6.1AI score0.0166EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2005/08/10 12:00 a.m.30 views

evolution -- remote format string vulnerabilities

A SITIC Vulnerability Advisory reports: Evolution suffers from several format string bugs when handling data from remote sources. These bugs lead to crashes or the execution of arbitrary assembly language code. The first format string bug occurs when viewing the full vCard data attached to an...

6.7AI score
SaveExploits0References1
securityvulns
securityvulns
added 2005/08/10 12:00 a.m.40 views

[Full-disclosure] Evolution multiple remote format string bugs

SITIC Vulnerability Advisory Advisory Name: Evolution multiple remote format string bugs Advisory Reference: SA05-001 Date of initial release: 2005-08-10 Product: Evolution 1.5, 2.0, 2.1, 2.2, 2.3 Platform: Linux, BSD systems, Unix Effect: Remote code execution Vulnerability Identifier: Not...

7.5AI score
SaveExploits0
securityvulns
securityvulns
added 2005/08/10 12:00 a.m.30 views

Multiple Evultion e-mail agent and groupware client format string vulnerabilities

Format string bugs on vCard format parsing, LDAP server reply parsing, remote server tasks displaying...

2.9AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder