CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...

CVE-2007-0312

The CVE-2007-0312 entry concerns wcSimple Poll where sensitive information is stored under the web root with insufficient access control, allowing remote attackers to obtain password hashes via a direct request for password.txt. Root cause: inadequate access restrictions on web-root files. Impact...

CVE-2006-0312

CVE-2006-0312 affects aoblogger 2.3. A flaw in create.php allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1. The root cause is an authentication bypass in the creation flow, enabling unauthorized post creation. Affected component: creat...

CVE-2005-0312

WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service access violation via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability...

CVE-2005-0312

WarFTPd (WarFTPD) 1.82 RC9/RC11 contains a denial-of-service vulnerability exploitable by a crafted CWD path consisting of a long string of "%s" sequences, potentially indicating a format-string issue. The flaw affects remote authenticated users (NT service context noted for RC9). Public referenc...

WarFTPd CWD Command Remote DoS

The remote host is running War FTP Daemon, an FTP server for Windows. The remote version of this software is prone to a remote denial of service vulnerability. An attacker may exploit this flaw to crash the remote service. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...

CVE-2004-0312

Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2...

CVE-2004-0312

CVE-2004-0312 affects Linksys WAP55AG (firmware 1.07) where an SNMP read-only community can be exploited to gain access to read/write community strings by querying OID 1.3.6.1.4.1.3955.2.1.13.1.2. This reveals a flaw in SNMP information exposure that allows escalation from read to write access. T...

CVE-2003-0312

Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...

CVE-2003-0312

CVE-2003-0312 applies to Snowblind Web Server 1.0 and describes a directory traversal vulnerability that allows remote attackers to read arbitrary files by crafting HTTP requests containing .. sequences. The vulnerability arises in the server’s handling of path traversal and can lead to exposure ...

CVE-2002-0312

Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. dot dot in a URL...

CVE-2002-0312

CVE-2002-0312 describes a directory traversal vulnerability in Essentia Web Server 2.1 that allows remote attackers to read arbitrary files by using a .. in the URL. The vulnerability affects the server’s handling of path traversal and can expose sensitive files from the server filesystem. The pr...

CVE-2001-0312

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing...

CVE-2001-0312

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing...

CVE-2001-0312

CVE-2001-0312 affects the IBM WebSphere plugin for Netscape Enterprise Server. The issue allows remote attackers to read JSP source code by issuing an HTTP request whose Host header references a host not in WebSphere’s host aliases, bypassing normal processing. The available connected documents p...

CVE-2000-0312

cron in OpenBSD 2.5 allows local users to gain root privileges via an argv that is not NULL terminated, which is passed to cron's fake popen function...

CVE-2000-0312

OpenBSD 2.5 cron is affected. A local user can exploit an argv[] that is not NULL terminated, which is passed to cron’s fake popen function, to gain root privileges.

CVE-1999-0312

HP ypbind is identified as the affected software for CVE-1999-0312. The description states that attackers with root privileges can modify NIS data via ypbind. Connected documents reiterate the same vulnerability, but no concrete fix version or remediation is provided in the supplied materials. Th...