140 matches found
Solaris 10 (x86) : 138372-06
SunOS 5.10x86: mechkrb5.so.1 patch. Date this patch was last updated by Sun : Mar/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...
Solaris 10 (sparc) : 138371-06
SunOS 5.10: mechkrb5.so.1 patch. Date this patch was last updated by Sun : Mar/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...
CVE-2008-0360
CVE-2008-0360 affects BLOG:CMS 4.2.1b and is caused by SQL injection in three inputs: blogid (index.php), user (action.php), and field (admin/plugins/table/index.php). The vulnerability can allow remote attackers to execute arbitrary SQL; the NVD entry lists a HIGH base score (7.5). Public exploi...
CVE-2007-0360
The CVE-2007-0360 issue is a PHP remote file inclusion in Oreon 1.2.3 RC4 and earlier, where the script lang/index.php unsafely uses the file parameter to include PHP code, enabling remote attackers to execute arbitrary code. Affected product: Oreon (web-based network supervision) prior to the fi...
CVE-2006-0360
The CVE-2006-0360 entry affects the MPM SIP HP-180W Wireless IP Phone WE.00.17. An unauthenticated remote access path exists via UDP port 9090 (undocumented), enabling potential exposure of sensitive information and a possible denial of service. The description specifies no authentication require...
CVE-2005-0360
The CVE-2005-0360 issue involves the Microsoft Log Sink Class ActiveX control in pkmcore.dll, which is marked as unsafe for scripting yet is labeled safe for scripting. The ActiveX control can create or append to arbitrary files on the local file system when exploited via Internet Explorer, enabl...
CVE-2004-0360
Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...
CVE-2004-0360
Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...
CVE-2004-0360
CVE-2004-0360 describes an unknown vulnerability in Solaris 8/9 passwd(1) that enables local privilege escalation via a circ() stack-based overflow. Public artifacts (Exploit-DB, 0day) document local root exploits exploiting a circ() buffer overflow and, in some descriptions, a ret-into-ld.so tec...
CVE-2003-0360
Multiple buffer overflows in gPS before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2003-0360
CVE-2003-0360 corresponds to multiple buffer overflow vulnerabilities in gPS prior to 1.0.0, enabling denial of service and possibly arbitrary code execution. Debian DSA-307 notes that gps versions around 1.1.0 fixed these issues (and related protocol/buffer bugs). Affected component: the gps gra...
CVE-2002-0360
The CVE-2002-0360 issue affects Sun AnswerBook2 1.4–1.4.3, where a buffer overflow in the gettransbitmap CGI allows a remote attacker to execute arbitrary code via a long filename argument. Impact is remote code execution with the daemon privileges; no exploit details are provided in the document...
CVE-2002-0360
Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...
CVE-2001-0360
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. dot dot attack in the helpon parameter...
CVE-2001-0360
The CVE-2001-0360 entry describes a directory traversal flaw in Ikonboard 2.1.7b and earlier, where help.cgi process accepts a malformed helpon parameter containing .. to read arbitrary files. The affected software is Ikonboard; the vulnerable component is help.cgi; root cause is improper validat...
CVE-2000-0360
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article...
CVE-2000-0360
INN buffer overflow (CVE-2000-0360) affects INN servers prior to 2.2.2, where the remote server fails to perform proper bounds checking, allowing a remote attacker to crash the service by sending a maliciously formatted news article. Public sources (NVD/Nessus/OpenVAS) corroborate a remote DoS ri...
Microsoft IIS repost.asp File Upload
The script '/scripts/repost.asp' is installed on the remote IIS web server and allows an attacker to upload arbitrary files to the '/Users' directory if it has not been configured properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Securit...
CVE-1999-0360
CVE-1999-0360 affects MS Site Server 2.0 on IIS 4, where the web server can accept uploaded content (including ASP), enabling remote command execution. A Nessus plugin notes a specific verifiable vector: the repost.asp script allows uploading arbitrary files to /Users when misconfigured. Root cau...