118 matches found
Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability
====================================================================== Secunia Research 03/03/2009 - libsndfile CAF Processing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
Debian Security Advisory DSA 463-1 (samba)
The remote host is missing an update to samba announced via advisory DSA 463-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-0186
CVE-2008-0186 is an XSS vulnerability in NetRisk 1.9.7 (and possibly earlier) affecting index.php. The issue allows remote attackers to inject arbitrary web script or HTML through the page parameter. The affected product is NetRisk; root cause is reflected/scriptable input via the page parameter ...
CVE-2007-0186
Multiple cross-site scripting XSS vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via 1 the xcho parameter to my.logon.php3; the 2 topblue, 3 midblue, 4 wtopblue, and certain other Custom color parameters in a per action to...
CVE-2007-0186
CVE-2007-0186 concerns multiple cross-site scripting (XSS) flaws in F5 FirePass SSL VPN . The reference entries describe injectable script/HTML through numerous parameters across several components (for example, xcho in my.logon.php3; color and text parameters in vdesk/admincon/index.php; ua in b...
CVE-2005-0186
CVE-2005-0186 affects Cisco IOS releases 12.1YD, 12.2T, 12.3 and 12.3T when ITS/CME/SRST are active. A malformed SCCP control message can trigger a device reboot (DoS). Answer: vulnerable component is IOS Telephony Service/CME/SRST handling of SCCP; root cause is malformed control protocol messag...
CVE-2005-0186
Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service ITS, CallManager Express CME or Survivable Remote Site Telephony SRST, allows remote attackers to cause a denial of service device reboot via a malformed packet to the SCCP port...
CVE-2004-0186
CVE-2004-0186 is a local privilege-escalation in Samba (2.x/3.x) on Linux 2.6 where the setuid-smounted utility smbmnt can be exploited: when a setuid root binary is present on a mounted share, a local user can execute it to gain root privileges. The underlying issue is that setuid attributes are...
CVE-2004-0186
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted...
Mandrake Linux Security Advisory : samba (MDKSA-2004:035)
A vulnerability was discovered in samba where a local user could use the smbmnt utility, which is shipped suid root, to mount a file share from a remote server which would contain a setuid program under the control of the user. By executing this setuid program, the local user could elevate their...
CVE-2004-0186
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted...
CVE-2002-0186
CVE-2002-0186 describes a buffer overflow in the Microsoft SQLXML ISAPI extension for SQL Server 2000. The flaw arises from inadequate validation of the contenttype parameter in SQLXML HTTP requests, allowing a remote attacker to trigger a crash or execute arbitrary code (the extension runs with ...
CVE-2002-0186
Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."...
MS02-030: Unchecked Buffer in SQLXML (321911)
The remote host is running SQLXML. There are flaws in this application that could allow a remote attacker to execute arbitrary code on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11304;...
CVE-2001-0186
The CVE-2001-0186 issue affects Free Java Web Server 1.0 and is a path traversal vulnerability. The root cause is improper handling of directory traversal sequences (".."), enabling remote attackers to read arbitrary files. Documented impact is access to files via crafted requests; no explicit fi...
CVE-2001-0186
Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0186
The CVE-2000-0186 entry concerns a buffer overflow in the dump utility of the Linux ext2fs backup package. The underlying issue is a too-long command line argument, which can allow a local user to gain privileges. The affected component is the dump utility within the ext2fs backup toolchain; the ...