3395 matches found
Security holes in WoltLab Burning Board
Product : WoltLab Burning Board http://www.woltlab.de Versions : 1.1.0 and less Problems : - XSS - Access to users/admins accounts More details in french : http://www.ifrance.com/kitetoua/tuto/wbboard.txt translated by google : http://translate.google.com/translate?u=http3A...
rsync 2.3/2.4/2.5 - Signed Array Index Remote Code Execution
// source: https://www.securityfocus.com/bid/3958/info A vulnerability exists within some versions of rsync. Under some circumstances, a remotely supplied signed value is used as an array index, allowing NULL bytes to be written to arbitrary memory locations. Exploitation of this vulnerability...
twlc advisory: all versions of php nuke are vulnerable...
twlc security divison 24/09/2001 Php nuke BUGGED. Found by: LucisFero and supergate ./twlc Summary This time the bug is really dangerous...it allows you to 'cp' any file on the box... or even upload files... Systems Affected all the versions ARE vulnerable except '5.0 RC1' i wonder why a released...
Oracle 8i - TNS Listener Buffer Overflow
// source: https://www.securityfocus.com/bid/2941/info Oracle 8i ships with a component called TNS Listener. TNS Listener is used to arbitrate communication between remote database clients/applications and the database server. There exists a remotely exploitable buffer overflow in TNS Listener...
Re: Winamp 2.6x / 2.7x buffer overflow
Winamp 2.74 doesnt seem to be affected by the bug although I thought it would be, only 2.60 - 2.73 are affected, the AIP file format is some format invented by AudioSoft to provide a legal way to get MP3's from the net. AIP files or AudioSoft parameter files seem to contain weakly encrypted...
Advisory for Viking
Advisory for Viking Viking is made by Robtex. Site: http://www.robtex.com/viking by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0107 /-|=explanation=|- Viking is a webserver. It has a simple hex encoded dot dot bug. /-|=who is vulnerable=|- Tested to be vulnerable: Viki...
FreeBSD-SA-01:31.ntpd
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:31 Security Advisory FreeBSD, Inc. Topic: ntpd contains potential remote compromise Category: core/ports Module: ntpd Announced: 2001-04-06 Credits: Przemyslaw Frasunek...
Mysql 3.22.x3.23.x - Local Buffer Overflow
Mysql 3.22.x3.23.x - Local Buffer Overflow // source: https://www.securityfocus.com/bid/2262/info MySQL is a widely used Open Source database tool. Versions of MySQL up to and including 3.23.30 are vulnerable to a buffer overflow attack. By supplying an excessively long string as an argument for ...
University of Washington Pico 3.x/4.x - File Overwrite
source: https://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, it is possible to cause this version of Pico to...
wgate41a.txt
================================================================= Blue Panda Vulnerability Announcement: Wingate 4.1 Beta A 16/10/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: ========= The logfile servic...
Security Advisory: FreeBSD-SA-00:42.linux
============================================================================= FreeBSD-SA-00:42 Security Advisory FreeBSD, Inc. Topic: Linux binary compatability mode can cause system compromise Category: core Module: kernel Announced: 2000-08-28 Credits: Boris Nikolaus [email protected]...
Microsoft Windows 3.1195NT 4.0NT 3.5.1 - Out Of Band Data Denial of Service (1)
Microsoft Windows 3.1195NT 4.0NT 3.5.1 - Out Of Band Data Denial of Service 1 // source: https://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relati...
Sun Solaris 2.5.1 PAM / unix_scheme - 'passwd' Local Privilege Escalation
/ source: https://www.securityfocus.com/bid/201/info There is a buffer overflow condition on arguments in Pluggable Authentication Modules PAM and unixscheme 5.4 and 5.3. Therefore, an unauthorized user could exploit this vulnerability via the passwd program to gain root access. Under SunOS 5.5.1...
FreeBSD-SA-96:09.vfsload
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:09 Security Advisory Revised: Wed May 22 00:20:09 PDT 1996 FreeBSD, Inc. Topic: unauthorized access via mountunion / mountmsdos vfsload Category: core Module: libc...
