100 matches found
CVE-2009-0027
CVE-2009-0027 affects JBossWS in JBoss EAP/JBEAP 4.2 (before 4.2.0.CP06) and 4.3 (before 4.3.0.CP04). The vulnerability arises from improper validation of the resource path when serving WSDL files for custom web-service endpoints, allowing remote attackers to read arbitrary XML files with the EAP...
Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP04 update
Updated JBoss Enterprise Application Platform JBoss EAP 4.3 packages that fix various issues are now available for Red Hat Enterprise Linux 5 as JBEAP 4.3.0.CP04. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss Enterprise Application...
CVE-2008-0027
CVE-2008-0027 corresponds to a heap overflow in Cisco Unified Communications Manager’s CTL Provider service (CTLProvider.exe). The flaw; occurs in CUCM 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and in CallManager 4.0/4.1 before 4.1(3)SR5c; the CTL Provider listens on TCP port 2444 and proces...
TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-02 January 16, 2008 -- CVE ID: CVE-2008-0027 -- Affected Vendor: Cisco -- Affected Products: Cisco Call Manager 4.13 -- Vulnerability Details: This vulnerability allows remote...
CVE-2007-0027
CVE-2007-0027 affects Microsoft Excel versions including Excel 2000 SP3, 2002 SP3, 2003 SP2, Excel 2004 for Mac, and Excel v.X for Mac. The flaw is a remote code execution due to memory corruption when parsing malformed IMDATA records in BIFF Excel files. An attacker could exploit this by enticin...
Microsoft Excel fails to properly handle malformed IMDATA records
Overview A vulnerability in the way that Microsoft Excel handles malformed image records could allow an attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to properly validate the size of IMDATA records. When a file containing a malformed IMDATA record is...
Microsoft Security Bulletin MS07-002 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (927198)
Microsoft Security Bulletin MS07-002 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 927198 Published: January 9, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Excel Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
CVE-2006-0027
CVE-2006-0027 describes a remote code execution vulnerability in Microsoft Exchange Server triggered by specially crafted vCal/iCal properties in email messages. Public sources (MS06-019) document a heap overflow in MODPROP handling within VCAL requests as the underlying root cause. Affected prod...
CVE-2003-0027
Directory traversal vulnerability in Sun Kodak Color Management System KCMS library service daemon kcmsserver allows remote attackers to read arbitrary files via the KCSOPENPROFILE procedure...
CVE-2003-0027
The CVE-2003-0027 vulnerability affects Sun KCMS kcms_server on Solaris. The KCS_OPEN_PROFILE call does not properly validate the fileName, allowing a remote attacker to perform directory traversal and read arbitrary files. The ToolTalk database server (rpc.ttdbserverd) TT_ISBUILD() procedure can...
CVE-2002-0027
Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in...
CVE-2002-0027
Affected software: Internet Explorer 5.5 and 6.0. Vulnerability: Frame Domain Verification bypass via Document.open between frames from different domains; allows a remote attacker to read files and spoof the URL in the address bar. Impact: reads files on target and can impersonate sites; variant ...
CVE-2000-0027
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...
CVE-2002-0027
Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in...
CVE-2001-0027
The CVE-2001-0027 issue concerns the ProFTPD mod_sqlpw module where the cached password is not reset when a user issues the "user" command to switch accounts. This can allow an authenticated attacker to gain privileges of another user. The vulnerability affects the mod_sqlpw component within ProF...
CVE-2001-0027
modsqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users...
CVE-2000-0027
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...
CVE-1999-0027
CVE-1999-0027 affects SGI IRIX via a buffer overflow in the eject command that grants root privileges. The Red Hat and CVE listings confirm the same description; PT-1997-1011 notes affected SGI IRIX with no fix details available. The EUVD entry mentions Malware in sbrugna, not a direct technical ...
