CVE-2009-0185

Apple QuickTime before 7.6.2 is affected by a heap-based buffer overflow in processing MS ADPCM encoded audio data within AVI files, enabling potential remote code execution or crash (DoS). Public docs list CVE-2009-0185 among a set of related QuickTime vulnerabilities; remediation is to update t...

QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of MS ADPCM encoded audio data may lead to an application crash or arbitrary code execution. CVE-2009-0185 - A memor...

Debian Security Advisory DSA 457-1 (wu-ftpd)

The remote host is missing an update to wu-ftpd announced via advisory DSA 457-1. OpenVAS Vulnerability Test $Id: deb4571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 457-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0185

CVE-2008-0185 affects NetRisk 1.9.7 (and possibly earlier) and is caused by an SQL injection in index.php where the pid parameter in a profile page (profile.php) is not properly sanitized. This allows remote attackers to execute arbitrary SQL commands. The NVD entry documents a base score of 7.5 ...

CVE-2007-0185

DWR (Getahead Direct Web Remoting) before version 1.1.4 is vulnerable to denial of service due to memory exhaustion triggered by a large number of batched calls; the specific vectors are not detailed in the provided documents. No remediation details are present here.

CVE-2006-0185

Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CVE-2005-0185

CVE-2005-0185 describes a stack-based buffer overflow in NodeManager Professional 2.00 . The overflow occurs via a LinkDown-Trap packet containing a long OCTET-STRING in the Trap variable-bindings field, enabling an unauthenticated remote attacker to potentially execute arbitrary commands. The pr...

CVE-2004-0185

CVE-2004-0185 describes a buffer overflow in wu-ftpd’s S/KEY authentication path (skey_challenge in ftpd.c) for version 2.6.2, allowing remote code execution or denial-of-service via a long s/key name. Connected records corroborate a remote overflow vulnerability in Wu-FTPd with S/KEY support, an...

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

CVE-2004-0187

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0185. Reason: This candidate is a reservation duplicate of CVE-2004-0185. Notes: All CVE users should reference CVE-2004-0185 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

CVE-2002-0185

The CVE-2002-0185 issue affects Apache mod_python versions 2.7.6 and earlier, where a module indirectly imported by a published module can be accessed via the publisher, allowing remote attackers to call potentially dangerous functions from the imported module. The OpenVAS/NVD/CVE listings corrob...

CVE-2002-0185

modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...

CVE-2002-0185

modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...

CVE-2001-0185

Netopia R9100 router (version 4.6) is affected. An authenticated user can trigger a denial-of-service by using the router’s telnet interface to connect to the router’s own IP, causing the device to crash. The CVE entry does not provide exploit details beyond this described vector. No additional r...

CVE-2000-0185

Technical details about CVE-2000-0185 are not publicly provided in the supplied documents. Monitor for updates from official sources for any affected products, scope, impact, and remediation.

CVE-1999-0185

In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution...

CVE-1999-0185

The CVE-1999-0185 entry concerns SunOS/Solaris where a remote user could leverage an FTP server’s data port to connect to an rlogin server on a host that trusts the FTP server, enabling remote command execution. The vulnerability arises from an insecure trust relationship between the FTP data pat...