CVE-2005-0187

CVE-2005-0187 describes a stack-based buffer overflow in the SetSkin function of the AtHoc toolbar. The vulnerability allows remote attackers to execute arbitrary code by supplying a long skin name, indicating a remote code execution risk via the affected component. The documents identify the aff...

CVE-2004-0187

CVE-2004-0187 is rejected/not used; this candidate has been superseded by CVE-2004-0185.

CVE-2003-0187

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIGIPNFCONNTRACK enabled or the ipconntrack module loaded, allows remote attackers to cause a denial of service resource consumption due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to...

CVE-2003-0187

...

CVE-2003-0187

The connection tracking core of Netfilter for Linux 2.4.20, with CONFIGIPNFCONNTRACK enabled or the ipconntrack module loaded, allows remote attackers to cause a denial of service resource consumption due to an inconsistency with Linux 2.4.20's support of linked lists, which causes Netfilter to...

CVE-2003-0187

The CVE pertains to the Netfilter connection-tracking core in Linux 2.4.20 where CONFIG_IP_NF_CONNTRACK or ip_conntrack causes DoS. Technical details in the connected records show a change in the linked-list API handling that affects UNCONFIRMED connections: Netfilter could fail to identify such ...

CVE-2002-0187

The CVE-2002-0187 entry corresponds to a cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000, where an attacker could inject script via the root parameter of an XML SQL query. Connected documents also describe a related overflow issue in the SQLXML ISAPI filter...

CVE-2002-0187

Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."...

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

CVE-2001-0187

CVE-2001-0187 concerns WU-FTPD up to version 2.6.1, where a format-string vulnerability in debug mode can allow remote code execution. The issue affects WU-FTPD when using RFC 931 authentication with debugging enabled, potentially letting an attacker craft ident responses that are logged by the s...

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

CVE-2000-0187

EZShopper 3.0 contains directory traversal in loadpage.cgi (and related scripts per Nessus data) that allows remote attackers to read arbitrary files via .. traversal and may permit command execution via shell metacharacters. Affected component is EZShopper’s web CGI handling; root cause is impro...

CVE-1999-0187

CVE-1999-0187 entry is rejected/not used; duplicate of CVE-1999-0022.