242 matches found
thttp207.txt
Application: thttpd Vendors: http://www.acme.com/software/thttpd/ Version: 2.07 beta 0.4 10dec99 Platforms: Windows Bug: Directory Traversal Date: 2004-08-04 Author: CoolICE e-mail: CoolICEChina.com ================ Content: in libhttpd.c: int httpdparserequest httpdconn hc ... if hc-decodedurl0 ...
CVE-2004-0475
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash "\" before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this bug may overlap CVE-2003-1041...
CVE-2003-0905
Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service disallowing new connections via a certain sequence of TCP/IP packets...
F-Secure BackWeb 6.31 - Local Privilege Escalation
F-Secure BackWeb 6.31 - Local Privilege Escalation source: https://www.securityfocus.com/bid/10055/info A vulnerability has been reported in F-Secure BackWeb that may permit local attackers to gain system level privileges. The source of this vulnerability is that certain areas within the BackWeb...
CVE-2003-0503
Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument...
Gattaca Server 1.0.8.0 (1.0): JS/HTML code injection.
ZUD SECURITY TEAM PRESENT bug found by nimber Email : [email protected] Site: www.zudteam.org HomePage: www.nimber.plux.ru 7.08.2003 Application: Gattaca Server Versions: 1.0.8.0 1.0 Platform: Windows Web Site: www.gattaca-server.com Bug: JS/HTML code injection. XSS vulnerability Exploitexaple:...
CVE-2002-2275
Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe...
CVE-2001-1342
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service GPF via an HTTP request for a URI that contains a large number of / slash or other characters, which causes certain functions to dereference a null pointer...
CVE-2001-1514
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to 1 child processes created with and 2 child processes that call the CreateProcess function and are executed with or end with the CFX extension...
WFTPD 3.0 - 'RETR' / 'CWD' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/2644/info Invalid long strings submitted using either 'RETR' or 'CWD' commands to a host running WFTPD server, will result in the service terminating due to a buffer overflow. It may be possible for an attacker to execute arbitrary code through this...
Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service (MS00-070)
Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service MS00-070 source: https://www.securityfocus.com/bid/1743/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedur...
Microsoft Windows Server 20009598NT 4.0 - Long Filename Extension
Microsoft Windows Server 20009598NT 4.0 - Long Filename Extension // source: https://www.securityfocus.com/bid/1259/info Windows 95, 98, NT and 2000 suffer from a number of related buffer overflows that can result in a crash if a filename with an extension longer than 128 characters is accessed...
win98-con.txt
New exploit found by the securax crew on 3/3/error for: windoze 98 maybe 95 too... not for NT4 or win2K When we looked at the new exploit for ie that uses the image c:/con/con http://www.zoomnet.net/quick/error/crash.html we experimented a bit with that unexisting path. We found that any program ...
CVE-1999-0909
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability...
CVE-1999-1463
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...
CVE-2024-33863
An issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inclusion...
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2008 SP2 for Itanium-based Systems (KB2804580)
A security issue has been identified that could allow an attacker to misrepresent a system action or behavior without the knowledge of the user. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...