111 matches found
CVE-2013-0336
The ipapwdchpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwdextop.c in the directory server dirsrv in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service crash via a connection request without a username/dn, related to the 389 directory server...
CVE-2013-0336
CVE-2013-0336 affects the FreeIPA dirsrv component: the ipapwd_chpwop function (ipa_pwd_extop.c) in the directory server allows a remote DoS (crash) via a connection request that omits a username/dn. Impact is described as a partial denial of service. The vulnerability is present in FreeIPA befor...
CVE-2014-0336
Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...
CVE-2014-0336
Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...
CVE-2014-0336
The CVE-2014-0336 issue affects Serena Dimensions CM 12.2 Build 7.199.0 web client (and possibly earlier) and is caused by a cross-site request forgery (CSRF) vulnerability in the web client. An attacker can craft a malicious URI to perform actions in an administrator’s session via the user_new_m...
Fedora Update for freeipa FEDORA-2013-4460
Check for the Version of freeipa OpenVAS Vulnerability Test Fedora Update for freeipa FEDORA-2013-4460 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora 18 : freeipa-3.1.3-4.fc18 (2013-4460)
Update to upstream 3.1.3. Add fix for CVE-2013-0336 389-ds-base: DoS when connecting with a missing username/dn Add fix for CVE-2013-1897: unintended information exposure when nsslapd-allow-anonymous-access is set to rootdse Note that Tenable Network Security has extracted the preceding descripti...
UBUNTU-CVE-2013-0336
The ipapwdchpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwdextop.c in the directory server dirsrv in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service crash via a connection request without a username/dn, related to the 389 directory server...
CentOS Update for tomcat5 CESA-2011:0336 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-0336
CVE-2010-0336 affects TYPO3 via the kiddog_mysqldumper extension (versions up to 0.0.3). The vulnerability enables remote attackers to obtain sensitive information via unknown attack vectors. Public records indicate affected versions are 0.0.3 and earlier, with no confirmed fix in a newer version...
CVE-2009-0336
BlogIt! is affected. The vulnerability stems from storing the database file (Blog.mdb) under the web root with insufficient access controls, enabling remote attackers to download the credentials database via a direct request. This is a server-side exposure of sensitive user data. The description ...
CVE-2009-0336
creationtimestamp| type| source ---|---|--- 2009-01-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7806...
CentOS 3 / 4 / 5 : postgresql (CESA-2007:0336)
Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS...
CVE-2007-0336
Undercover CVE-2007-0336 affects the application’s local UC component (Undercover.app/Contents/Resources/uc) in Rixstep Undercover. The primary issue is described as a race condition that allows local users to overwrite arbitrary files. The available documents do not provide concrete details on a...
CVE-2006-0336
Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service CPU consumption and hang via unknown vectors involving "browsing the web"...
CVE-2006-0336
Kerio WinRoute Firewall (before 6.1.4 Patch 2) is affected by CVE-2006-0336. The vulnerability allows a Denial of Service that leads to CPU consumption and system hang through unknown vectors related to "browsing the web". According to the NVD entry, the affected product is Kerio WinRoute Firewal...
CVE-2005-0336
Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...
CVE-2005-0336
CVE-2005-0336 pertains to a Cross-site scripting (XSS) flaw in EMotion MediaPartner Web Server 5.0. The vulnerability arises when a URL containing .. sequences and HTML is processed, causing a directory browsing page to fail to filter HTML, enabling remote attackers to inject arbitrary HTML or we...
CVE-2004-0336
The CVE-2004-0336 issue affects LAN SUITE Web Mail 602Pro, where a vulnerability in the mail login form allows remote attackers to obtain the path to the mail directory, exposing sensitive information. The core cause is disclosure of internal file paths via the login interface. Impact is informat...