215 matches found
CVE-2007-0040
CVE-2007-0040 affects Microsoft Windows Active Directory’s LDAP service (Windows 2000 Server SP4, Windows Server 2003 SP1/SP2, x64, Itanium variants). The issue is an LDAP request handling flaw related to the number of convertible attributes, enabling remote attackers to crash the service or exec...
MS07-039: Microsoft Windows Active Directory LDAP Service Remote Code Execution (926122)
The remote version of Active Directory contains a flaw in the LDAP request handler code that allows an attacker to execute code on the remote host. On Windows 2000 an anonymous attacker can exploit this flaw by sending a specially crafted LDAP packet. On Windows 2003 valid credentials are needed ...
CVE-2006-0040
CVE-2006-0040 affects GNOME Evolution 2.4.2.1 and earlier. A remote attacker can trigger a denial of service by sending a text email containing a very large number of URLs, leading to increased CPU and memory usage. The root cause is noted as potentially related to gtkhtml, but the exact flaw is ...
Evolution Emailer DoS
About 7 weeks ago an automated mailing list spewed a large but valid email containing a lot of URLS and other formatting. When this email is fed into evolution the behaviour it causes leads evolution to expand dramatically in size and eat vast amounts of CPU time. If you've got a lot of patience...
DotNetNuke < 3.0.12 Multiple HTML Injection Vulnerabilities
DotNetNuke contains several input validation flaws leading to the execution of attacker supplied HTML and script code. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2005-0040
DotNetNuke (DNN) before 3.0.12 is affected by multiple XSS vulnerabilities (CVE-2005-0040) that allow remote attackers to inject script via (1) the register-a-new-user page, (2) the User-Agent header, and (3) the Username field, due to improper quoting before logging. Affected versions are
CVE-2004-0040
A buffer overflow flaw in the ISAKMP implementation used by Check Point VPN-1, SecuRemote, and SecureClient (ISAKMP/IKE) allows unauthenticated remote code execution via a crafted ISAKMP packet with a large Certificate Request payload. Exploitation targets UDP 500 and can run with VPN process pri...
CVE-2002-0040
CVE-2002-0040 affects SGI IRIX 6.5.11–6.5.15f, where the HOSTALIASES environment variable can cause privileged applications to dump core, potentially enabling privilege escalation. The issue is local and was addressed by SGI in IRIX 6.5.16m/6.5.16f with patches; the advisory outlines affected com...
CVE-2001-0040
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file...
CVE-2001-0040
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file...
CVE-2000-0040
The CVE-2000-0040 issue affects glFtpD, where local users can gain privileges by supplying metacharacters in the SITE ZIPCHK command. Documentation in PT-1999-1848 notes that affected versions are not specified and provides no information about a fix. Overall, the vulnerability arises from improp...
CVE-1999-0040
CVE-1999-0040 affects the X Windowing System’s Xt library. The vulnerability is a buffer overflow in Xt that allows local users to execute commands with root privileges. Public details in connected sources confirm the affected component as Xt within X Windowing System, and the impact is local pri...