122 matches found
CVE-2009-0148
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as 1 source-code tokens and 2 pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541...
CVE-2009-0148
CVE-2009-0148 is part of multiple buffer-overflow flaws in the cscope package. The initial document notes long input strings and pathnames can trigger remote code execution, linked to an incomplete fix for CVE-2004-2541. Connected advisories (RHSA-2009:1101/1102 and equivalents for CentOS/Oracle ...
FreeBSD Ports: wu-ftpd
The remote host is missing an update to the system as announced in the referenced advisory. VID 3b7c7f6c-7102-11d8-873f-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian Security Advisory DSA 457-1 (wu-ftpd)
The remote host is missing an update to wu-ftpd announced via advisory DSA 457-1. OpenVAS Vulnerability Test $Id: deb4571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 457-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
HP-UX PHNE_31732 : HP-UX Running wu-ftpd Local Unauthorized Access (HPSBUX01059 SSRT4704 rev.4)
s700800 11.23 ftpd1M and ftp1 patch : A potential vulnerability has been identified with HP-UX running wu-ftpd with the restricted gid option enabled where the vulnerability could be exploited by a local user to gain unauthorized access to files. %NASLMINLEVEL 70300 C Tenable Network Security, In...
CVE-2007-0148
CVE-2007-0148 affects OmniGroup OmniWeb 5.5.1. Root cause: a format string vulnerability in the Javascript alert function that can be exploited by remote attackers to cause a crash or to execute arbitrary code. Impact includes denial of service and potential code execution with network-based acce...
CVE-2006-0148
NetSarang Xlpd 2.1 is affected by CVE-2006-0148: a denial-of-service condition triggered by a high volume of connections from a single IP address that can crash the service. The available sources (NVD/NIST) describe remote DoS potential but do not specify exploit details, exploit status, or a con...
CVE-2005-0148
Thunderbird
CVE-2005-0148
Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the...
CVE-2004-0148
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...
CVE-2004-0148
CVE-2004-0148 affects wu-ftpd 2.6.2 and older when the restricted-gid option is enabled, allowing a local user to bypass access restrictions and cause the FTP server to treat the root directory as the user’s home. The underlying cause is a missing check for a restricted user in a code path execut...
CVE-2004-0148
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...
CVE-2003-0148
The CVE-2003-0148 entry concerns a vulnerability in the default MSDE installation used with McAfee ePolicy Orchestrator (ePO) 2.0–3.0. The issue allows an attacker who can access the ePO server to obtain the database administrator username and the encrypted password from the server config file. T...
CVE-2002-0148
CVE-2002-0148 is a cross-site scripting vulnerability in Microsoft Internet Information Services (IIS) 4.0, 5.0 and 5.1 that allows remote attackers to execute arbitrary script as the affected user via an HTTP error page. Connected sources confirm this CSS/XSS issue is part of a broader set of II...
CVE-2001-0148
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability...
CVE-2000-0148
CVE-2000-0148 : MySQL 3.22 allows remote attackers to bypass password authentication and read a database by exploiting a short check string. The vulnerability is triggered remotely over the network with low attack complexity and results in partial confidentiality and integrity impact (and partial...
MySQL Short Check String Authentication Bypass
The remote version of MySQL is older than or as old as version 3.22.30 or 3.23.10. Thus, it may allow attacker who knows a valid username to access database tables without a valid password. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid10343; scriptversion"1.31";...
CVE-2000-0148
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string...
CVE-1999-0148
The IRIX environment is affected by CVE-1999-0148 due to the installed /cgi-bin/handler CGI, which has a well-known flaw that allows arbitrary command execution. The vulnerability can execute commands with the privileges of the HTTP daemon (root or nobody). Documents consistently describe it as r...