85 matches found
iDefense Security Advisory 03.01.11: Alcatel-Lucent OmniPCX Enterprise CS CGI Cookie Buffer Overflow Vulnerability
iDefense Security Advisory 03.01.11 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 01, 2011 I. BACKGROUND The Alcatel-Lucent OmniPCX Enterprise Communication Server CS is a communication server platform that provides multimedia call processing for both Alcatel-Lucent and third-party...
CVE-2003-0344
creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16581 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms03020ieobjecttype.rb 2025-02-06 03:13:37+00:00...
Microsoft Internet Explorer - Object Type (MS03-020) (Metasploit)
$Id: ms03020ieobjecttype.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2010-0344
CVE-2010-0344 is a SQL injection vulnerability in the zak_store_management extension (version 1.0.0 and earlier) for TYPO3. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This is corroborated by multiple sources (e.g., Red Hat, NVD) describing the sam...
CVE-2010-0344
SQL injection vulnerability in the zakstoremanagement extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-0344
The CVE-2009-0344 entry concerns an unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM). Affected firmware is SP/BMC before version 3.20. The issue allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP)...
MS03-020 Microsoft Internet Explorer Object Type
This module exploits a vulnerability in Internet Explorer's handling of the OBJECT type attribute. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS03-020 Microsoft Internet Explorer Object...
CVE-2008-0344
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07...
CVE-2008-0344
Technical details about CVE-2008-0344 are not publicly available in the provided documents. The records note an unspecified vulnerability in the Oracle Spatial component with unknown impact; monitor for updates.
CVE-2007-0344
CVE-2007-0344 affects Colloquy 2.1 and earlier, with multiple format-string vulnerabilities in the internal methods _invitedToRoom and _invitedToDirectChat. The format specifiers in the channel name of an INVITE request can trigger denial of service (application crash) and potentially arbitrary c...
CVE-2007-0344
Multiple format string vulnerabilities in 1 invitedToRoom: and 2 invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, relate...
CVE-2006-0344
CVE-2006-0344 describes a directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 that allows remote attackers to read and write arbitrary files via a .. (dot dot) in the STOR and RETR commands. The vulnerability arises from insufficient validation in file path handling, enabli...
CVE-2005-0344
The CVE-2005-0344 entry concerns 602LAN SUITE (version 2004.0.04.1221). The vulnerability is a directory traversal flaw: a dot-dot (.. ) in the filename parameter allows remote authenticated users to upload and execute arbitrary files. The public records summarize the impact as enabling arbitrary...
CVE-2004-0344
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. dot dot in the attachOld parameter...
CVE-2004-0344
YaBB SE 1.5.4–1.5.5b contains a directory traversal vulnerability in ModifyMessage.php, exploitable with an attached Old parameter to delete arbitrary files via .. path component. Impact: remote attacker could remove files on the affected host. Root cause is improper validation of the attachOld p...
CVE-2003-0344
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / slash characters in the Type property of an Object tag in a web page...
CVE-2003-0344
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / slash characters in the Type property of an Object tag in a web page...
CVE-2003-0344
Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by a buffer overflow in the OBJECT element Type attribute, allowing remote code execution via crafted HTML. The issue (CVE-2003-0344) is a known variant related to double-byte language support and has been publicly discussed in MS03-020/M...
CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server...
CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server...