332 matches found
GForge 3.x - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/13716/info GForge is affected by a remote command execution vulnerability. This issue arises because the application fails to sanitize user-supplied data passed through URI parameters. An attacker can supply arbitrary shell commands through the affected...
[SA15425] SurgeMail Unspecified Cross-Site Scripting Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
NTP Server Protocol Version 3 Detection
Binary data 1148.prm...
SNMP Version 3 Detection
Binary data 1120.prm...
Distributed Network Protocol Version 3 (DNP3) Outstation Detection (SCADA)
Binary data 3553.prm...
KPhone 2.x/3.x/4.0.1 - Malformed STUN Packet Denial of Service
source: https://www.securityfocus.com/bid/10159/info A denial of service vulnerability has been reported in KPhone. This issue may be triggered by a malformed SIP Session Initiation Protocol STUN message. This is due to insufficient validation of user-specified STUN packet attribute lengths,...
CVE-2003-0507: Undefined Security Weakness
Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service reboot and possibly execute arbitrary code via an LDAP version 3 search request with a large number of 1 "AND," 2 "OR," and possibly other statements, which causes...
STunnel 3.x - Client Negotiation Protocol Format String
// source: https://www.securityfocus.com/bid/3748/info Stunnel is a freely available, open source cryptography wrapper. It is designed to wrap arbitrary protocols that may or may not support cryptography. It is maintained by the Stunnel project. Stunnel does not properly handle unexpected input b...
CVE-2000-0967
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs...
Microsoft IIS 3.04.0 - Upgrade BDIR.HTR
Microsoft IIS 3.04.0 - Upgrade BDIR.HTR source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts...
PT-1998-1026 · Slmail · Slmail
Name of the Vulnerable Software and Affected Versions: SLmail versions 3.x Description: A buffer overflow issue in SLmail allows attackers to execute commands by using a large FROM line. Recommendations: For SLmail versions 3.x, update to a version that fixes this issue to prevent command executi...
