3267 matches found
HP-UX 11,Linux kernel 2.4,Windows 2000/NT 4.0,IRIX 6.5 Small TCP MSS DoS
No description provided by source. source: http://www.securityfocus.com/bid/2997/info A potential denial of service vulnerability exists in several TCP stack implementations. TCP has a MSS maximum segment size option that is used by a TCP client to announce to a peer the maximum amount of TCP dat...
Microsoft Windows 2000 Help Facility .CNT File :Link Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7102/info The Microsoft Windows 2000 Help facility does not perform sufficient bounds checking on .cnt files. If a .cnt file containing an unusually long :Link URI was opened by the Windows Help facility, a buffer would b...
Opera 6.0.x FTP View Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5401/info A cross-site scripting vulnerability in Opera has been reported. When viewing the contents of an FTP site as web content, the data within title tags is not sanitized. An attacker may embed javascript between ope...
Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges. Successful exploits may...
PrivaShare <= 1.3 - Denial of Service Exploit
No description provided by source. / PrivaShare TCP/IP DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Tested on Windows2000 SP4 Greats: Infam0us Gr0up Team/member,and ll of u..take care! Info: -...
Nevis Systems All-Mail 1.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim...
SurfControl SuperScout WebFilter for windows 2000 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5857/info SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files. The Reports Server does not sufficiently filter...
SAP DB 7.x Web Server WAHTTP.EXE Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploitin...
MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (1)
No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...
Novell NetMail <= 3.52d IMAP APPEND Buffer Overflow
No description provided by source. $Id: novellnetmailappend.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Novell NetMail <= 3.52d NMAP STOR Buffer Overflow
No description provided by source. $Id: nmapstor.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
PeerCast <= 0.1216 URL Handling Buffer Overflow (win32)
No description provided by source. $Id: peercasturl.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
AnalogX Proxy 4.0 Socks4A Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5138/info AnalogX Proxy is prone to a buffer overflow condition when attempting to handle malformed SOCKS4A requests via TCP port 1080. This may be exploited to create a denial of service condition or to potentially execu...
HP OpenView Network Node Manager Snmp.exe CGI Buffer Overflow
No description provided by source. $Id: hpnnmsnmp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Indexing Services for Windows 2000 File Verification Vulnerability
No description provided by source. source : http://www.securityfocus.com/bid/1933/info Microsoft Windows 2000 Indexing Services is a search engine that will allow a user to perform full-text searches of online sites using their browsers. Search results include Word, Excel, PowerPoint, and HTML...
Cerulean Studios Trillian Client 0.74 MSN Module Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11142/info Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow an attacker to execute arbitrary code on a...
CVE-2011-5279
CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...
Crlf injection
CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...
CVE-2011-5279
The CVE-2011-5279 entry concerns CRLF injection in the CGI component of Microsoft Internet Information Services (IIS) 4.x and 5.x running on Windows NT/2000. The vulnerability arises when a newline character in an HTTP header enables an attacker to modify arbitrary uppercase environment variables...
CVE-2011-5279
CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...