140 matches found
CVE-2008-0394
CVE-2008-0394 : A buffer overflow in Citadel SMTP Server (versions 7.10 and earlier) is triggered by a long RCPT TO command due to insufficient bounds checking in the makeuserkey function. Remote attackers could potentially execute arbitrary code. Multiple advisories confirm the vulnerability and...
Debian: Security Advisory (DSA-1082-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1070-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-0394
Technical details about CVE-2007-0394 are not publicly available in the provided connected documents; the materials reiterate the HP-UX vulnerability without expanding on affected versions, impact specifics, or fixes. Monitor for updated advisories.
DSA-1067-1 kernel-source-2.4.16 - several
Bulletin has no description...
CVE-2006-0394
CVE-2006-0394 is a duplicate of CVE-2006-0848; the connected records confirm the issue is Safari on macOS where the “Open 'safe' files after downloading” feature can be abused to execute arbitrary commands by tricking a user into opening a ZIP containing a __MACOSX metadata file that invokes Term...
CVE-2004-0394
A "potential" buffer overflow exists in the panic function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic...
CVE-2004-0394
CVE-2004-0394 concerns a potential buffer overflow in the panic() function of Linux 2.4.x. The description explicitly indicates a possible overflow, but notes it may not be exploitable due to the function’s behavior. The connected OpenVAS entries reference this CVE among broader kernel advisories...
CVE-2003-0394
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Serverpath parameter that points to malicious code on an attacker-controlled web site...
CVE-2003-0394
CVE-2003-0394 affects BLNews 2.1.3 where objects.inc.php4 is vulnerable to remote code execution via a Server[path] parameter pointing to attacker-controlled PHP code. The vulnerability enables an attacker to include remote PHP files, executing code with the web server’s privileges. Affected prod...
CVE-2003-0394
objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Serverpath parameter that points to malicious code on an attacker-controlled web site...
BLNews objects.inc.php4 Server[path] Parameter Remote File Inclusion
It is possible to make the remote host include remote PHP files using the BLnews CGI suite. A remote attacker may exploit this to execute arbitrary code with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Thu, 22 May 2003 14:42:13 +0400 From: Ove...
CVE-2002-0394
The CVE-2002-0394 entry refers to Red-M 1050 Access Point vulnerabilities. Affected device: Red-M 1050AP; issue: case-insensitive administrative passwords with max length 16 and allowed chars [a–z0–9], enabling quicker brute-force attempts. Related issues documented include Management Web Server ...
CVE-2001-0394
The CVE-2001-0394 entry concerns Website Pro 3.0.37 where the Remote manager service is vulnerable to a denial-of-service via a sequence of malformed HTTP requests to the /dyn directory. The NVD entry lists a CVSS2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no a...
CVE-2001-0394
Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory...
CVE-2001-0394
Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory...
CVE-2000-0394
CVE-2000-0394 affects NetProwler 3.0. The vulnerability allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler’s Man-in-the-Middle signature. According to NVD, the exploitability is network-based with low attack complexity and no authenticatio...
CVE-2000-0394
NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature...
CVE-1999-0394
CVE-1999-0394 affects DPEC Online Courseware . The vulnerability allows an attacker to change another user’s password without knowing the original password. Red Hat, NVD, and CVE listings confirm this description. The PT-1999-1080 entry notes that affected versions are not specified and there is ...