138 matches found
Debian DSA-1706-1 : amarok - integer overflows
Tobias Klein discovered that integer overflows in the code the Amarok media player uses to parse Audible files may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...
Debian: Security Advisory (DSA-1082-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-0135
CVE-2008-0135 affects Snitz Forums 2000 up to version 3.4.06, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the forum/snitz_forums_2000.mdb directly via HTTP, exposing the database. The impact described is exposure of ...
CVE-2007-0135
CVE-2007-0135 describes a PHP remote file inclusion in the PHP application Aratix (version 0.2.2 beta 11 and earlier). The root cause is an RFI in the file inc/init.inc.php when PHP’s register_globals setting is enabled; an attacker can supply a URL in the current_path parameter to execute arbitr...
CVE-2006-0135
The CVE-2006-0135 entry concerns a SQL injection in TheWebForum (twf) 1.2.1, specifically in login.php via the username parameter (u). The root cause is unsafely constructed SQL in the login routine, enabling remote attackers to execute arbitrary SQL and bypass authentication. The linked document...
CVE-2005-0135
Technical details for CVE-2005-0135 are not publicly provided in the connected documents. The sources reference kernel updates and include CVE lists, but do not specify affected products/versions, root cause, impact, or remediation. Monitor for updates.
CVE-2004-0135
The syssgi SGIIOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory...
CVE-2004-0135
The syssgi SGIIOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory...
CVE-2004-0135
The CVE-2004-0135 entry concerns the SGI IO system call SGI_IOPROBE in IRIX 6.5.20–6.5.24, which allows local users to gain privileges by reading and writing kernel memory. The vulnerability is confirmed in multiple sources: NVD/NVD entry already specifies the affected IRIX versions and the local...
CVE-2003-0135
vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers tcpwrappers but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended...
CVE-2003-0135
vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers tcpwrappers but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended...
CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service crash via a series of connections to one of the ports 1417 - 1420...
CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier are affected by a denial of service vulnerability discovered via a series of connections to ports 1417–1420. The issue allows remote attackers to crash the service, impacting availability (Partial impact per CVSS). The provided documents identify the affecte...
CVE-2001-0135
CVE-2001-0135 affects Ultraboard 2000, version 2.11. The default install creates Skins, Database, and Backups directories with world-writable permissions, enabling a local user to modify sensitive information or potentially insert and execute CGI programs. The connected OpenVAS/Nessus entries ref...
CVE-2000-0135
CVE-2000-0135 affects the @Retail shopping cart application. NVD notes remote attackers can modify sensitive purchase information via hidden form fields, with a CVSS v2 base score of 7.5 (NETWORK, LOW complexity, NONE auth, partial impact across confidentiality, integrity, and availability). Conn...
CVE-1999-0135
admintool in Solaris allows a local user to write to arbitrary files and gain root access...
CVE-1999-0135
The connected documents confirm a local privilege escalation in Solaris via admintool, where a local user can write to arbitrary files and gain root access. The affected component is admintool on Solaris; root-privilege gain is the stated impact. No explicit exploit details, vulnerable version ra...