273 matches found
CVE-2005-3183
CVE-2005-3183 – affected software: w3c-libwww (HTBoundary_put_block in HTBound.c). Root cause/impact: remote servers can induce a denial of service (segmentation fault) by sending a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. This matches the description in the ...
Fedora Core 4 : w3c-libwww-5.4.0-13.0.FC4.1 (2005-952)
This update fixes libwww's handling of multipart/byteranges content and a possible stack overflow. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora Core 3 : w3c-libwww-5.4.0-10.0.FC3.1 (2005-953)
This update fixes libwww's handling of multipart/byteranges content and a possible stack overflow. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
oracle_xmldb_css.txt
Cross-Site-Scripting Vulnerability in Oracle XMLDB Name Cross-Site-Scripting Vulnerability in Oracle XMLDB Systems Affected Oracle Database 9i Rel. 2 Severity Low Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...
CVE-2005-3155
CVE-2005-3155 concerns a buffer overflow in the W3C logging functionality of MailEnable IMAPD. Publicly documented impact indicates remote code execution against MailEnable Professional 1.6 and earlier and MailEnable Enterprise 1.1 and earlier. Exploit references (Metasploit module and SAINT/pack...
CVE-2005-3155
Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code...
MailEnable buffer overflow
Buffer overflow on logging in W3C format...
CVE-2002-1053
Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...
CVE-2002-1053
The CVE-2002-1053 entry documents a cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server prior to 2.2.1. The flaw allows remote attackers to inject and have arbitrary script executed via a URL that contains a reference to a nonexistent host, with the script included in the resultin...
CVE-2002-1053
Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...
W3.ORG sendtemp.pl
Follows are details of a vunerability I recently discovered in W3.ORGS sendtemp.pl. Name: sendtemp.pl W3C. Remote: Yes Local: Yes Type: sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read access to files on the servers file...
CVE-2000-0079
The CVE-2000-0079 entry concerns CERN httpd's path disclosure vulnerability. Public sources in connected documents indicate that remote attackers could determine the real pathnames of certain commands by requesting a nonexistent URL, with additional details from Nessus showing an information-disc...