152 matches found
Debian DSA-540-1 : mysql - insecure file creation
Jeroen van Wolffelaar discovered an insecure temporary file vulnerability in the mysqlhotcopy script when using the scp method which is part of the mysql-server package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2004-0457
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0457
CVE-2004-0457: The mysqlhotcopy script in MySQL
CVE-2002-0457
Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as , , and & in fields such as 1 name, 2 email, 3 AIM screen name, 4 website, 5 location, or 6 message...
CVE-2002-0457
The CVE-2002-0457 entry describes a cross-site scripting (XSS) vulnerability in BG GuestBook 1.0, specifically in signgbook.php. The flaw allows remote attackers to inject arbitrary JavaScript via encoded tags (e.g., , &) in user-submittable fields such as name, email, AIM screen name, website, l...
CVE-2002-0457
Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as , , and & in fields such as 1 name, 2 email, 3 AIM screen name, 4 website, 5 location, or 6 message...
CVE-2000-0457
Summary: CVE-2000-0457 affects Microsoft IIS 4.0/5.0 via ISM.DLL, enabling remote disclosure of file contents by requesting a file and appending spaces and ".HTR" (the File Fragment Reading vulnerability). Affected component: ISM.DLL in IIS 4.0/5.0 handling .HTR requests. Impact: partial confiden...
CVE-2001-0457
man2html before 1.5-22 allows remote attackers to cause a denial of service memory exhaustion...
CVE-2001-0457
CVE-2001-0457 affects man2html prior to 1.5-22. The Debian security advisory DSA-035-1 and OpenVAS entries warn that remote attackers could trigger a denial of service via memory exhaustion. A patch/update to the affected man2html package is the indicated remediation. The OpenVAS NASL notes the i...
CVE-2000-0457
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces %20 and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability...
CVE-1999-0457
CVE-1999-0457 concerns the Linux ftpwatch program. The connected Red Hat CVE entry reiterates that Linux ftpwatch program allows local users to gain root privileges , i.e., a local-privilege-escalation vulnerability. The available documents do not specify affected distributions, versions, or the ...