Searching several software vulnerabilities

Several startup scripts in SCO OpenServer Enter

Enterprise | OpenServer | vulnerable | S84rpcinit | including | allowing | Several | startup | scripts | symlink | access | attack | S89nfs | System | S95nis | S85tcp | local | gain | root | 504p | user | SCO |

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.


IPChains in Linux kernels 2.2.10 and earlier do

IPChains | kernels | Linux |

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.


Buffer overflow in Vermillion FTP Daemon VFTPD

Vermillion | overflow | Daemon | Buffer | VFTPD | FTP |

Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.


The mcsp Client Site Processor system (MultiCSP

Processor | Client | system | mcsp | Site |

The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.


Quake 3 arena 1.29f and 1.29g allows remote att

attackers | service | remote | denial | allows | arena | Quake | cause | 129g | 129f |

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.


Buffer overflow in SHOUTcast Server 1.8.2 allow

SHOUTcast | overflow | Server | Buffer |

Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.


Dino's Webserver 1.2 allows remote attackers to

attackers | Webserver | service | denial | allows | Dino's | remote | cause |

Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time.


ScriptEase MiniWeb Server 0.95 allows remote at

ScriptEase | MiniWeb | Server |

ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.


Buffer overflow in several Database Consistency

Consistency | Database | Checkers | overflow | several | Buffer |

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.


xfsmd for IRIX 6.5 through 6.5.16 allows remote

through | xfsmd | IRIX |

xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().


SAP R/3 2.0B to 4.6D installs several clients w

privileges | passwords | attackers | installs | clients | default | several | remote | allows | which | users | gain | SAP | via | 46D | 20B | R/3 |

SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.


Belkin F5D6130 Wireless Network Access Point ru

attackers | firmware | Wireless | running | F5D6130 | Network | service | remote | Belkin | denial | Access | AP14G8 | allows | Point | cause |

Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests.


The Catalina org.apache.catalina.connector.http

orgapachecatalinaconnectorhttp | Catalina | package | Tomcat | 40x |

The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests.


Mozilla allows remote attackers to cause a deni

attackers | Mozilla | service | denial | allows | remote | cause |

Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme.


Multiple unspecified vulnerabilities in Gyach E

vulnerabilities | unspecified | Enhanced | Multiple | Gyach |

Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses.


Unknown vulnerability several dissectors in Eth

vulnerability | dissectors | Ethereal | Unknown | several |

Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of service (application crash) by reassembling certain packets.


MailEnable Enterprise 1.1 before patch ME-10009

Enterprise | MailEnable | attackers | ME-10009 | service | denial | remote | before | allows | patch | cause |

MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command.


Buffer overflow in zawhttpd 0.8.23, and possibl

zawhttpd | overflow | Buffer |

Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service (daemon crash) via a request for a URI composed of several "\" (backslash) characters.


Cisco Security Monitoring, Analysis and Respons

Monitoring | Analysis | Response | Security | System | Cisco |

Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information.


Multiple unspecified vulnerabilities in Joomla!

vulnerabilities | unspecified | Multiple | before | Joomla |

Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "unneeded legacy functions" and (2) "Several low level security fixes."


Software vulnerabilities results 1 to 20 of 41     
Page: 123►