117 matches found
CVE-2004-0139
Technical details about CVE-2004-0139 are not provided in the supplied documents; affected product, exploit, and impact are not specified. Monitor for updates.
CVE-2003-0158
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0139. Reason: This candidate is a reservation duplicate of CVE-2003-0139 due to incomplete coordination. Notes: All CVE users should reference CVE-2003-0139 instead of this candidate. All references and descriptions in this...
CVE-2003-0158
CVE-2003-0158 is rejected/not used; refer to CVE-2003-0139 for the active entry.
CVE-2003-0139
The connected Debian advisory (DSA-266-1) confirms CVE-2003-0139 concerns MIT Kerberos 4 (krb4) weaknesses in the krb5 distribution. Specifically, when using triple-DES keys to protect krb4 services, an attacker can craft krb4 tickets for unauthorized principals via a cut-and-paste/ticket-splicin...
CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...
CVE-2002-0139
Pi-Soft SpoonFTP 1.1 and earlier is affected by an FTP bounce vulnerability where remote attackers can redirect traffic to other sites using the PORT command. The issue arises in how the PORT command allows specifying an arbitrary destination, enabling data connections to be opened to arbitrary h...
CVE-2002-0139
Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command...
CVE-2001-0139
Inn 2.2.3 is vulnerable to a local temporary-file race condition. The root cause is inn creating temporary files in a world-writable directory (or being configured to use one), enabling symlink attacks that may modify files writable by the news user. Mandrake/MDKSA-2001:010 notes a patch that rel...
CVE-2001-0139
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...
CVE-2001-0139
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...
CVE-2000-0139
The CVE-2000-0139 entry concerns Internet Anywhere POP3 Mail Server where local users can trigger a denial of service through a malformed RETR command. The vulnerability is local in scope with a low base score (2.1) and partial availability impact; no explicit exploit details or mitigations are p...
CVE-2000-0139
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command...
CVE-2000-0139
Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command...
CVE-1999-0139
Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access...
CVE-1999-0139
CVE-1999-0139 describes a buffer overflow in Solaris x86 mkcookie that allows local users to obtain root access. The Red Hat, EUVD, CVE, and NVD entries confirm the issue and its local-privilege-elevation impact. The provided records do not specify affected Solaris versions, exact vulnerable func...