268041
|
- |
|
id_software
|
quake_ii_server
|
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to send data stored at a…
|
CWE-20
Improper Input Validation
|
CVE-2004-2592
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268042
|
- |
|
id_software
|
quake_ii_server
|
Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary …
|
NVD-CWE-Other
|
CVE-2004-2593
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268043
|
- |
|
id_software
|
quake_ii_server_windows
|
Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as de…
|
NVD-CWE-Other
|
CVE-2004-2594
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268044
|
- |
|
id_software
|
quake_ii_server_linux
|
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download co…
|
NVD-CWE-Other
|
CVE-2004-2595
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268045
|
- |
|
id_software
|
quake_ii_server
|
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP add…
|
CWE-20
Improper Input Validation
|
CVE-2004-2596
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268046
|
- |
|
id_software
|
quake_ii_server
|
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is al…
|
NVD-CWE-Other
|
CVE-2004-2597
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268047
|
- |
|
-
|
-
|
Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via the server console or rcon.
|
NVD-CWE-Other
|
CVE-2004-2599
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268048
|
- |
|
ubertec
|
help_center_live
|
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.p…
|
NVD-CWE-Other
|
CVE-2004-2601
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268049
|
- |
|
ubertec
|
help_center_live
|
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php.
|
NVD-CWE-Other
|
CVE-2004-2602
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268050
|
- |
|
intel hp
|
cli_auto-configuration_utility client_system_setup_utility server_configuration_wizard server_control system_setup_utility carrier_grade_server_tigpr2u carrier_grade_server_tsrlt2
|
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter…
|
NVD-CWE-Other
|
CVE-2004-2600
|
2017-07-11 10:32 |
2004-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|