CVE-2007-0423

CVE-2007-0423 affects BEA WebLogic Portal 9.2. The issue arises when an administrator deletes entitlements for a role, which reportedly causes other entitlements to be inadvertently affected; the impact is described as unknown. No concrete root cause, vulnerability vector, exploit details, or rem...

CVE-2006-0423

BEA WebLogic Portal 8.1 through SP3 stores the RDBMS Authentication provider password in cleartext in config.xml, allowing privilege escalation. Affected component: WebLogic Portal configuration for RDBMS auth. Root cause: cleartext password storage in config.xml. Impact: partial confidentiality ...

CVE-2001-0423

CVE-2001-0423 concerns a buffer overflow in Solaris 7 x86 ‘ipcs’ that local users can exploit by supplying a long TZ environment variable, enabling arbitrary code execution on the affected host. The vulnerability is specific to Solaris 7 x86; it is described as a local privilege escalation/vector...

CVE-2001-0423

Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ timezone environmental variable, a different vulnerability than CAN-2002-0093...

CVE-2004-0423

CVE-2004-0423 affects ssmtp 2.50.6 and earlier. The log_event function allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file, enabling local privilege impact as described. The Connected documents provide the same description across multiple sourc...

CVE-2003-0423

parsexml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter...

CVE-2003-0423

parsexml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via the filename parameter...

CVE-2003-0423

Apple QuickTime/Darwin Streaming Server’s parse_xml.cgi vulnerability (CVE-2003-0423) allows remote access to the source code of files via /parse_xml.cgi?filename=[file] for DS 4.1.3g and earlier. The issue is caused by Web root script disclosure, with no fix available at the time and Apple inves...

CVE-2002-0423

The CVE-2002-0423 entry concerns efingerd 1.5 and earlier (potentially up to 1.61). The vulnerability is a buffer overflow in the finger service triggered by a finger request from an IP with a long hostname resolved via reverse DNS, allowing remote attackers to cause a denial of service and possi...

CVE-2002-0423

Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup...

CVE-2000-0423

The CVE-2000-0423 entry describes a vulnerability in Netwin DNEWSWEB CGI where a buffer overflow allows remote attackers to execute arbitrary commands by supplying long values for parameters such as group, cmd, and utag. Affected component is the DNEWSWEB CGI program; root cause is a buffer overf...

CVE-1999-0423

CVE-1999-0423 concerns the hpterm component on HP-UX 10.20, where a vulnerability allows local users to gain additional privileges. The linked Red Hat, EUVD, CVE, and NVD records all reiterate the HP-UX hpterm impact without revealing a specific exploit method, affected files, or exact root cause...