97 matches found
CVE-2007-0068
CVE-2007-0068 concerns IBM Lotus Domino 7.0.x before 7.0.3. The issue is that Domino does not revalidate the signature on a signed scheduled agent after the agent is modified, enabling remote authenticated users to gain privileges via a modified agent in a server database. The connected sources c...
CVE-2006-0068
CVE-2006-0068 affects Primo Cart 1.0 and earlier, with a SQL injection vulnerability exploitable via the q parameter in search.php and the email parameter in user.php, allowing remote arbitrary SQL execution. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low comple...
UnixWare ICMP Message Handling Denial of Service
Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...
CVE-2005-0068
CVE-2005-0068 is attack-based and tied to ICMP handling flaws (forgeable ICMP errors affecting TCP/Path MTU) with related CVEs (2004-0790/0791/1060). Connected documents provide concrete details: ICMP authentication gaps enable denial-of-service via spoofed messages (Destination Unreachable, Sour...
Debian DSA-496-1 : eterm - missing input sanitising
H.D. Moore discovered several terminal emulator security issues. One of them covers escape codes that are interpreted by the terminal emulator. This could be exploited by an attacker to insert malicious commands hidden for the user, who has to hit enter to continue, which would also execute the...
CVE-2004-0068
PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relativescriptpath parameter to reference a URL on a remote web server that contains the code...
CVE-2003-0068
The CVE-2003-0068 issue affects the Eterm terminal emulator up to version 0.9.1, where a crafted escape sequence could modify the window title and then be re-inserted into the command line, enabling arbitrary command execution in the user’s terminal. Public advisories (including Debian DSA-496 an...
PhpDig config.php relative_script_path Parameter Remote File Inclusion
The remote host is running phpdig, an http search engine written in PHP. There is a flaw in this product that could allow an attacker to execute arbitrary PHP code on this by forcing this set of CGI to include a PHP script hosted on a third-party host. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2002-0068
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service core dump and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters...
CVE-2002-0068
CVE-2002-0068 affects Squid 2.4 STABLE3 and earlier, due to a buffer overflow in FTP URL parsing when the URL contains many special characters. This can cause a core dump (DoS) and, in some reports, may allow remote code execution. Mitigation: upgrade to Squid 2.4.STABLE4 or newer (and apply vend...
CVE-2002-0068
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service core dump and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters...
CVE-2001-0068
Mac OS Runtime for Java MRJ 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter...
CVE-2001-0068
Mac OS Runtime for Java MRJ 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter...
CVE-2001-0068
The CVE-2001-0068 entry concerns Mac OS Runtime for Java (MRJ) 2.2.3. The connected NVD entry states that remote attackers could exploit malicious applets to read files outside the CODEBASE context by abusing the ARCHIVE applet parameter. The vulnerability description does not provide exploit cod...
CVE-2000-0068
The CVE-2000-0068 entry concerns the daynad component of Intel InBusiness E-mail Station. The issue arises because the daynad program does not require authentication, enabling remote attackers to modify configuration, delete files, or read mail. The provided sources state the vulnerability and im...
CVE-1999-0068
The CVE-1999-0068 issue affects PHP/FI’s mylog.html/mlog.html handling, where an arbitrary file read vulnerability allows a remote attacker to read any file on the target server via CGI PHP mylog script. The OpenVAS entries corroborate PHP/FI as affected and suggest remediation by upgrading to ve...