173 matches found
CVE-2003-0066
The CVE-2003-0066 issue affects rxvt 2.7.8 and earlier. A vulnerable escape sequence allows an attacker to modify the window title and have that title re-enter the shell as a command, enabling arbitrary command execution when a user views a file containing the malicious sequence. The root cause i...
CVE-2004-0066
phpGedView is affected by CVE-2004-0066 up to version 2.64. The vulnerability allows remote attackers to disclose the web server’s absolute path via malformed parameters to multiple PHP pages (indilist.php, famlist.php, placelist.php, imageview.php, timeline.php, clippings.php, login.php, gdbi.ph...
CVE-2004-0066
phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...
CVE-2003-0066
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to...
CVE-2003-0066
...
CVE-2002-0066
Funk Software Proxy Host 3.x contains multiple issues, primarily: (1) a Windows Named Pipe created by Proxy Host that is accessible with Everyone Full Control, allowing local/remote users to invoke configuration utilities and potentially gain privileges; (2) insecure password storage and recovery...
CVE-2001-0066
CVE-2001-0066 affects slocate (Secure Locate). A malformed database file can specify an offset that causes out-of-bounds memory access, resulting in memory corruption. In Mandrake advisories this could be exploited to run arbitrary code by supplying a crafted database. These details come from the...
CVE-2001-0066
Secure Locate slocate allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer...
CVE-2001-0066
Secure Locate slocate allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer...
CVE-2000-0066
WebSite Pro is affected by CVE-2000-0066: remote attackers can reveal the real pathname of web directories through a malformed URL request, causing information disclosure (partial confidentiality impact). The vulnerability is documented in multiple sources (NVD/CVE listings and a Nessus plugin). ...
CVE-2000-0066
WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request...
CVE-1999-0066
CVE-1999-0066 corresponds to a remote command execution vulnerability in the AnyForm CGI family. The Seebug entry describes AnyForm2 as vulnerable due to input validation flaws that pass unchecked user input to the SYSTEM call, enabling a remote attacker to execute arbitrary commands with the web...