CVE-2007-0230

CS-Cart 1.3.3 contains a PHP remote file inclusion in install.php via the install_dir parameter, potentially allowing remote code execution. Several sources note that the vulnerability is disputed because install_dir is defined before use, and no specific exploit details are provided in the docum...

Symantec Scan Engine fails to properly perform authentication

Overview Symantec Scan Engine administrative web interface fails to properly authenticate users, which may allow a remote attacker to gain administrative access to the software. Description The Symantec Scan Engine provides a programming interface to Symantec content scanning and virus detection...

CVE-2006-0230

Symantec Scan Engine 5.0.0.24 (and possibly earlier 5.0.x) is affected by an authentication design flaw that trusts the client-side applet to verify passwords. An unauthenticated remote attacker can gain administrative privileges by sending crafted XML requests to the server, effectively bypassin...

Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error

Rapid7, LLC Security Advisory Rapid7 Advisory R7-0021 Symantec Scan Engine Authentication Fundamental Design Error Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0021.html CVE: CVE-2006-0230 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN...

MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)

The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a denia...

CVE-2005-0230

Technical details (affected products/versions/root cause/fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2005-0230

Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files...

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...

CVE-2003-0230

CVE-2003-0230 affects Microsoft SQL Server 7, 2000, and MSDE. The vulnerability allows local users to gain privileges by hijacking a named pipe during authentication, due to a flaw in how named pipes are checked by SQL Server when a client authenticates via a named pipe. Impact is privilege eleva...

CVE-2002-0230

Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message...

CVE-2002-0230

CVE-2002-0230 covers a cross-site scripting (XSS) flaw in Faq-O-Matic’s fom.cgi (v2.712) that allows an attacker to inject arbitrary Javascript on other clients via the cmd parameter. Multiple connected sources corroborate an XSS issue in Faq-O-Matic, with OpenVAS and Tenable plugins referencing ...

CVE-2001-0230

Buffer overflow in dc20ctrl before 0.41 in FreeBSD, and possibly other operating systems, allows local users to gain privileges...

CVE-2000-0230

CVE-2000-0230 describes a buffer overflow in the imwheel utility. The vulnerability allows local users to gain root privileges via the imwheel-solo script when a long HOME environment variable is provided. Affected component: imwheel; root privilege escalation as stated. The connected documents c...

CVE-2000-0230

Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...

CVE-1999-0230

The CVE-1999-0230 entry describes a buffer overflow in Cisco 7xx routers via the Telnet service. Multiple connected sources confirm the issue exists and point to the same vulnerability description: a memory overflow in the Telnet handling code of Cisco 7xx devices. The Red Hat CVE page and other ...