120 matches found
CVE-2006-0087
CVE-2006-0087 affects Lizard Cart CMS 1.04. The vulnerability is in (1) pages.php and (2) detail.php, where the id parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD data lists a base score of 7.5 (HIGH) with network access, low attack c...
RHEL 4 : alsa-lib (RHSA-2005:033)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:033 advisory. The alsa-lib package provides a library of functions for communication with kernel sound drivers. A flaw in the alsa mixer code was discovered that...
Important: Red Hat Security Advisory: alsa-lib security update
An updated alsa-lib package that fixes a flaw that disabled stack execution protection is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The alsa-lib package provides a library of functions for...
CVE-2005-0087
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library...
CVE-2003-0087
CVE-2003-0087 describes a buffer overflow in the IBM AIX libIM.a (NLS) library. The vulnerability affects AIX 4.3.x through 5.2 and can allow a local attacker to gain privileges via multiple vectors, including a long -im argument to aixterm. The root cause is a buffer overflow in the libIM librar...
CVE-2003-0087
Buffer overflow in libIM library libIM.a for National Language Support NLS on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm...
CVE-2004-0087
The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088...
CVE-2004-0087
The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088...
CVE-2003-0087
Buffer overflow in libIM library libIM.a for National Language Support NLS on AIX 4.3 through 5.2 allows local users to gain privileges via several possible attack vectors, including a long -im argument to aixterm...
CVE-2000-0087
CVE-2000-0087 affects Netscape Communicator’s Mail Notification (nsnotify) utility. The issue arises from using IMAP without SSL even when the user configures SSL for Communicator, enabling a remote attacker to sniff usernames and passwords in plaintext. The description documents the vulnerable c...
CVE-2002-0087
bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...
CVE-2002-0087
CVE-2002-0087 affects Lotus Domino 5.07 on Solaris. A local user can create arbitrary files through a symlink attack on temporary files used by bindsock, enabling file creation via local access. No remediation details are provided in the supplied documents.
CVE-2002-0087
bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files...
CVE-2001-0087
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program...
CVE-2001-0087
CVE-2001-0087 affects itetris/xitetris 1.6.2 and earlier. The vulnerability arises because the program trusts the PATH environment variable to locate and execute the gunzip program, enabling local users to gain root privileges by arranging PATH to point to a crafted, malicious gunzip. The connect...
CVE-2000-0087
Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...
CVE-1999-0087
CVE-1999-0087 describes a denial-of-service issue affecting the AIX telnet service, where the system can be frozen and become inaccessible to users. The connected documents consistently identify the vulnerability as impacting AIX Telnet and note the outcome as a potential system stall, but they d...