175 matches found
CVE-2004-0418
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
CVE-2004-0418
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
CVE-2004-0418
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
Fedora Core 2 : cvs-1.11.17-2 (2004-170)
While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...
CVE-2004-0418
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
CVE-2004-0418
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
CVE-2004-0418
CVE-2004-0418 describes an out-of-bounds write vulnerability in CVS servers caused by improper handling of empty data lines in the serve_notify path. Affected CVS versions include CVS 1.12.x (up to 1.12.8) and 1.11.x (up to 1.11.16). The issue could enable remote attackers to execute arbitrary co...
CVE-2003-0418
The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses...
CVE-2002-0418
Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. dot dot and a null character in the paramname parameter...
CVE-2002-0418
The CVE-2002-0418 issue affects Endymion SakeMail prior to 1.0.36, specifically the com.endymion.sake.servlet.mail.MailServlet. The vulnerability is a directory-traversal in the param_name parameter, triggered by a ". ." sequence and a null character, allowing remote attackers to read arbitrary f...
CVE-2002-0418
Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. dot dot and a null character in the paramname parameter...
CVE-1999-0418
CVE-1999-0418 is a denial-of-service issue in SMTP applications (notably Sendmail) where a remote attacker floods a connection with many RCPT TO commands. The underlying effect is resource exhaustion leading to service disruption. Documents confirm the vulnerability and its generic impact but do ...
CVE-2001-0418
The CVE-2001-0418 entry concerns the NCM Content Management System where the content.pl script is vulnerable to SQL injection through the id parameter. This allows remote attackers to read arbitrary contents from the content database. The available documents confirm the affected component (conten...
CVE-2000-0418
Vulnerability (CVE-2000-0418) affects Cayman gateways, including the Cayman 3220-H DSL router, due to handling of oversized ICMP echo (ping) requests. Remote attackers can cause a denial of service by sending oversized ping packets. Exploitation details in the connected documents indicate affecte...