75 matches found
CVE-2006-0317
The CVE-2006-0317 entry describes a Cross-site scripting (XSS) vulnerability in RedKernel Referrer Tracker 1.1.0-3, specifically in rkrt_stats.php. The issue arises when a query string value supplied via GET is stored in the $QUERY_STRING variable, allowing remote attackers to inject arbitrary we...
CVE-2005-0317
CVE-2005-0317 affects Alt-N WebAdmin 3.0.4. The XSS flaw is in useredit_account.wdm (via the user parameter) and is caused by insufficient input validation/filtering. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, no confidentiality impact, partial integrity ...
CVE-2005-0317
Cross-site scripting XSS vulnerability in usereditaccount.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter...
CVE-2004-0317
Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service segmentation fault and possibly execute arbitrary code via a long LSFFromPC parameter...
CVE-2004-0317
Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service segmentation fault and possibly execute arbitrary code via a long LSFFromPC parameter...
CVE-2004-0317
CVE-2004-0317 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability is a buffer overflow in the eauth component triggered by a long LSF_From_PC parameter, allowing local users or attackers within an LSF cluster to cause a denial of service (segmentation fault) and pote...
CVE-2003-0317
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters...
CVE-2003-0317
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters...
CVE-2003-0317
The CVE-2003-0317 issue affects iisPROTECT 2.1 and 2.2, where a remote attacker can bypass authentication by sending URL-encoded (including hex-encoded) HTTP requests. The root cause is a failure to recognize basic URL encoding, enabling access to protected pages/directories. Documented impact is...
CVE-2002-0317
Gator ActiveX component IEGator.dll 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file setup.ex in the src parameter...
CVE-2002-0317
CVE-2002-0317 involves the Gator ActiveX component (IEGator.dll) 3.0.6.1. The vulnerability allows remote websites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter, enabling a remote-initiated installation via the ActiveX control. This ...
CVE-2001-0317
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process...
CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...
CVE-2000-0317
CVE-2000-0317 describes a buffer overflow in Solaris 7 lpset, leading to local root privileges when a long -r option is supplied. The entry specifically notes local privilege escalation, but the provided documents do not include detailed information on affected versions beyond Solaris 7, nor expl...
CVE-1999-0317
CVE-1999-0317 concerns a buffer overflow in the Linux su command that enables local users to gain root privileges. The core vulnerability is described as a buffer overflow affecting su, leading to full compromise of the local system. The provided connected documents reiterate the issue in differe...