Alibaba Security Vulnerabilities

CVE-2014-5976

The alibaba (aka com.alibaba.wireless) application 4.1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2000-0626

Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET...

CVE-1999-1444

genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in...

CVE-1999-0885

Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed...

CVE-1999-0776

Alibaba HTTP server allows remote attackers to read files via a .. (dot dot)...