639 matches found
ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows
Pentest Limited Security Advisory WIDCOMM Bluetooth Connectivity Software Buffer Overflows Advisory Details ---------------- Title: WIDCOMM Bluetooth Connectivity Software Buffer Overflows Announcement date: 11 August 2004 Advisory Reference: ptl-2004-03 CVE Name: CAN-2004-0775 Products: WIDCOMM...
WinAgentsTFTP.txt
WinAgents TFTP Server Long File Remote Denial Of Service Vulnerability Date: 10 June 2004 Security Alert ID: 1008084 Added by: HH Description: A vulnerability in WinAgents TFTP Server has been reported, allowing a remote user to cause the TFTP service to crash. It is reported that a remote user c...
vBulletin Multiple Cross Site Scripting Vulnerabilities
SYSTEMS AFFECTED ======== Jelsoft Enterprises vBulletin Forum exploited with a browser CONTENTS ========= Subject: vBulletin Multiple Cross Site Scripting Vulnerabilities Date: 17 September 2003 release from old archive, flaws found on 7 September 2002 Risk: Low DESCRIPTION ========= The vBulleti...
Vulnerabilitiy in Drag and Zip
=================================== - Product: Drag and Zip - Version: 3.0 - Offsite: http://www.canyonsw.com - Authors: Canyon Software - Problem: Buffer Overflow =================================== General Description The vulnerability found by me in this product, does not represent the big...
EType EServ 2.98/2.99/3.0 - Resource Exhaustion (Denial of Service) (2)
// source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open connections are not properly freed when a connection no longer...
EType EServ 2.982.993.0 - Resource Exhaustion (Denial of Service) (1)
EType EServ 2.982.993.0 - Resource Exhaustion Denial of Service 1 source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open...
BitKeeper Daemon Mode diff Shell Command Injection
The remote host is running version 3.0.x of BitKeeper. Some versions of this service are known to allow anyone to execute arbitrary commands with the privileges of the BitKeeper daemon. Nessus did not check for this vulnerability, but solely relied on the banner of the remote server to issue this...
CVE-2001-1084
Affected software: Allaire JRun 3.0 and 2.3.3. Vulnerability: cross-site scripting via error messages when a request targets non-existent files (.JSP, .shtml, .jsp10, .jrun, .thtml). Root cause: uploaded/embedded Javascript from attacker is echoed into an error page, enabling script execution. Im...
AOLserver 3.0 vulnerability
Aolserver 3.0 will crash when it is given a long authorization string. It is also possible this vulnerability will allow a hacker to execute arbitrary code through a buffer overflow. I have not verified a buffer overflow exists. Aolserver 3.4 and 3.3.1 are not vulnerable to this attack. Here is a...
CVE-2001-0521
CVE-2001-0521 affects Aladdin eSafe Gateway versions 3.0 and earlier. The issue allows a remote attacker to bypass the gateway’s HTML SCRIPT filtering by using Unicode-encoded SCRIPT tags within the HTML document. This describes a filtering bypass in the web gateway; the documents do not provide ...
WFTPD "Pro" 3.0 R4 Buffer Overflow
WFTP is the Win/NT FTP server by Alun Jones, "an author acknowledged as an expert in FTP and TCP/IP". This advisory pertains to "Professional" version 3.00 R4, which appears to be the current version. It can be downloaded from the author's site at http://www.wftpd.com/. WFTPD is released as...
Savant 3.0 web server vulnerability
Vendor Name: Savant Product: Savant 3.0 web server Discoverd by: Xatrix Url: www.xatrix.org 1. About software Savant web server has been written by Michael Lamont http://savant.sourceforge.com it is very configurable freeware http deamon for win95/98. It's current version is 3.0 2. Full Detail It...
Fixed in Apache Tomcat 3.1
Important: Information disclosure CVE-2000-1210 source.jsp, provided as part of the examples, allows an attacker to read arbitrary files via a .. dot dot in the argument to source.jsp. Affects: 3.0...
PHP 3.0.13 - 'Safe_mode' Failure
source: https://www.securityfocus.com/bid/911/info PHP Version 3.0 is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The goal of the language is to allow web developers to write dynamically generat...
Update for Windows SharePoint Services 3.0 (KB932091)
Update for Windows SharePoint Services 3.0 KB932091...
Windows Server Update Services 3.0 (KB935524)
Windows Server Update Services 3.0 KB935524...
March, 2017 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Vista SP2 and Server 2008 SP2 for x64 (KB3216520)
March, 2017 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Vista SP2 and Server 2008 SP2 for x64 KB3216520...