teleh0r

13 exploits Active since Nov 1999
CVE-2001-0735 EXPLOITDB perl WORKING POC
cfingerd <= 1.4.3 - Buffer Overflow via Long Line in .nofinger File
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
CVE-2001-0818 EXPLOITDB text WRITEUP
MDBMS <= 0.99b9 - Remote Code Execution via Console Command Buffer Overflow
A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data.
CVE-2000-0284 EXPLOITDB perl WORKING POC
University of Washington imapd 4.7 - Authenticated Buffer Overflow via LIST Command
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
CVE-2001-0110 EXPLOITDB perl WORKING POC
iomega jaZip - Buffer Overflow via DISPLAY Environment Variable
Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.
CVE-1999-0821 EXPLOITDB perl WORKING POC
FreeBSD seyon - Privilege Escalation
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
CVE-2000-0170 EXPLOITDB perl WORKING POC
Linux - Buffer Overflow via MANPAGER Environmental Variable
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
EIP-2026-102728 EXPLOITDB bash WORKING POC
RedHat 6.1/6.2 - TTY Flood Users
CVE-2000-0689 EXPLOITDB perl WORKING POC
Account Manager LITE - Privilege Escalation
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.
EIP-2026-100922 EXPLOITDB perl WORKING POC
UtilMind Mail List 1.7 - Users Can Execute Commands
EIP-2026-100844 EXPLOITDB perl WORKING POC
ListMail 112 - Command Execution
CVE-2001-0476 EXPLOITDB perl WORKING POC
Aspseek < 1.0.3 - Remote Code Execution via Long HTTP Query String or tmpl Parameter
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
CVE-2000-0688 EXPLOITDB perl WORKING POC
Subscribe Me LITE - Privilege Escalation
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter.
CVE-2000-0690 EXPLOITDB perl WORKING POC
Auction Weaver <= 1.02 - Remote Command Execution via fromfile Parameter
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.