CVE-2013-0350

CVE-2013-0350 affects pktstat 1.8.5 via a local-symlink vulnerability in /tmp/smtp.log that lets a local user overwrite arbitrary files. The connected documents confirm the affected component and the root cause (symlink attack) and the impact (arbitrary file overwrite). No concrete remediation or...

CVE-2014-0350

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...

CVE-2014-0350

The CVE concerns POCO C++ Libraries’ NetSSL X509Certificate::verify in Poco::Net, vulnerable before 1.4.6p4 to MITM via crafted DNS PTRs during server-name wildcard comparison. Affected product: POCO’s NetSSL in POCO C++ Libraries; root cause: weak validation of X.509 CN/SAN matching against wild...

CVE-2014-0350

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...

POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates

Overview The POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates, allowing an attacker to trick the victim application into trusting a malicious certificate. Description CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action Guenter Obiltschnig o...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

RedHat Update for kernel RHSA-2012:0350-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : kernel (RHSA-2012:0350)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0350 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

CVE-2011-0350

Cisco IOS 12.4(24)MD1+ on the Cisco Content Services Gateway Second Generation (CSG2) is vulnerable to DoS via crafted TCP packets, causing device hang or reload. The issue is tied to Bug IDs CSCth41891 and is separate from CVE-2011-0349 (CVE-2011-0350). The advisory describes two DoS vulnerabili...

CVE-2010-0350

Directory traversal vulnerability in the Photo Book gooffotoboek extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors...

CVE-2010-0350

CVE-2010-0350 affects TYPO3’s Photo Book (goof_fotoboek) extension versions 1.7.14 and earlier, where a directory traversal vulnerability exists in the Photo Book component. The description notes unknown impact and remote attack vectors; no explicit exploit details, affected file(s), or remediati...

CVE-2009-0350

Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip. NOTE: some of these details are obtained from third party information...

CVE-2009-0350

Merak Media Player 3.2 is affected by a stack-based buffer overflow in how it processes the status bar tooltip text for .m3u playlists. A crafted long string in an .m3u file can trigger the overflow, allowing remote attackers to execute arbitrary code. The vulnerability is confirmed by multiple s...

CVE-2009-0350

creationtimestamp| type| source ---|---|--- 2009-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7857 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8126...

Fedora Core 9 FEDORA-2009-0350 (bind)

The remote host is missing an update to bind announced via advisory FEDORA-2009-0350. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-0350 (bind)

The remote host is missing an update to bind announced via advisory FEDORA-2009-0350. OpenVAS Vulnerability Test $Id: fcore20090350.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0350 bind Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2008-0350

CVE-2008-0350 affects Evilsentinel 1.0.9 and earlier. Admin/index.php redirects without exiting, enabling remote attackers to gain administrative privileges and perform arbitrary configuration changes. The NVD entry notes a network-exposed vulnerability with partial impact to confidentiality, int...

CVE-2007-0350

CVE-2007-0350 describes multiple SQL injection vulnerabilities in SmE FileMailer 1.21 and earlier, affecting index.php and dl.php. The flaw allows remote attackers to inject SQL via the (1) ps, (2) us, (3) f, or (4) code parameters, with the us parameter in index.php already covered by CVE-2007-0...

CVE-2006-0350

The CVE-2006-0350 entry concerns an XSS vulnerability in eggblog 2.0. The flaw allows remote attackers to inject arbitrary Web script or HTML via the message field to topic.php. NVD records a base score of 4.3 (MEDIUM) with network attack vector, no confidentiality or availability impact, and par...

CVE-2005-0350

CVE-2005-0350 describes a heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products. The vulnerability allows a remote attacker to execute arbitrary code by sending a crafted ARJ archive. The CVSS metrics indicate a network-exposed, low-attack-complexity issue with...