3632 matches found
CVE-2004-1982
Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field...
Sami HTTP Server 1.0.4 GET Request Remote Overflow
According to its banner, the remote web server is running Sami HTTP server is v1.0.4 or older. An attacker may be capable of corrupting data such as the return address, and thereby control the execution flow of the program. This may result in denial of service or execution of arbitrary code. This...
Immunity Canvas: EZNET
Name| eznet ---|--- CVE| CVE-2003-1339 Exploit Pack| CANVAS Description| eznet Notes| References: 'http://www.ezmeeting.com/Products.html', 'http://www.elitehaven.net/ezstackoverflow.txt' CVE Name: CVE-2003-1339 VENDOR: EZMeeting Date public: 12/07/2003 CERT Advisory: CVE Url:...
Immunity Canvas: MSXEXCH50
Name| msxexch50 ---|--- CVE| CVE-2003-0714 Exploit Pack| CANVAS Description| MS Exchange 2000 XEXCH50 integer overflow ms03-046 Notes| CVE Name: CVE-2003-0714 VENDOR: Microsoft MSADV: MS03-046 MSRC: http://www.microsoft.com/technet/security/bulletin/ms03-046.asp NOTE: CVE Url:...
CVE-2003-0831
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files...
Default Password (ibmdb2) for 'db2inst1' Account
The account 'db2inst1' has the password 'ibmdb2'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 This script was written by Chris Foster See the Nessus Scripts License for details Changes by Tenable Add globalsettings/suppliedloginsonly scriptexcludekey...
CVE-2003-0194
tcpdump does not properly drop privileges to the pcap user when starting up...
CVE-2003-0190
...
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." dot-dot backslash sequences in a GET request...
CVE-2002-1006
Cross-site scripting XSS vulnerability in BBC Education Text to Speech Internet Enhancer Betsie 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl...
CVE-2002-0975
Buffer overflow in Microsoft DirectX Files Viewer ActiveX control xweb.ocx 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter...
Immunity Canvas: OPENSSL_KEYLEN
Name| opensslkeylen ---|--- CVE| CVE-2002-0656 Exploit Pack| CANVAS Description| OpenSSL keyarglen Overflow Notes| References: http://www.openssl.org/news/secadv20020730.txt CVE Name: CVE-2002-0656 VENDOR: OpenSSL Repeatability: Multiple WARNING: On busy webservers it might require couple of...
CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...
CVE-2001-1362
Vulnerability in the server for nPULSE before 0.53p4...
CVE-2001-1365
Vulnerability in IntraGnat before 1.4...
CVE-2002-0471
PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the aquery variable...
AlienForm2 alienform.cgi Traversal Arbitrary File Manipulation
The AlienForm CGI script allows an attacker to view any file on the target computer, append arbitrary data to an existing file, and write arbitrary data to a new file. The AlienForm CGI script is installed as either af.cgi or alienform.cgi. %NASLMINLEVEL 70300 This script was written by Andrew...