199 matches found
CVE-2007-0480
The CVE-2007-0480 vulnerability affects Cisco IOS 9.x, 10.x, 11.x, 12.x and IOS XR 2.0.x, 3.0.x, 3.2.x. A crafted IP option in the IP header contained in ICMP, PIMv2, PGM, or URD packets can cause a remote denial of service and may allow arbitrary code execution. Exploitation is remote and may re...
CVE-2006-0480
Technical details for CVE-2006-0480 are not publicly available in the provided documents. Monitor for updates.
CVE-2005-0480
CVE-2005-0480 is a cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier. The issue arises from accepting a login request that is recorded in a log file but not properly sanitized when an administrator views the log, allowing remote attackers to inject arbitrary HTML or web scri...
CVE-2004-0480
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...
CVE-2004-0480
Affected software: IBM Lotus Notes 6.0.3–6.5. Vulnerability: argument injection via a notes: URI that uses a UNC network share path to supply an alternate notes.ini for notes.exe, enabling remote code execution. Root cause (as described): insufficient argument filtering on the URI handler, allowi...
CVE-2004-0480
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe...
CVE-2003-0480
CVE-2003-0480 affects VMware Workstation 4.0 for Linux. The vulnerability allows a local user to overwrite arbitrary files and escalate privileges through symlink manipulation. Root cause: symlink manipulation enabling file overwrite and privilege gain. Documents do not provide exploit details or...
CVE-2003-0480
VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."...
CVE-2002-0480
ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...
CVE-2002-0480
ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...
CVE-2002-0480
Technical details about CVE-2002-0480 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2001-0480
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...
CVE-2001-0480
CVE-2001-0480 involves a directory traversal vulnerability in Alex’s FTP Server 0.7 . An attacker can read arbitrary files by sending a modified dot dot sequence in either the GET or CD commands, exploiting improper path handling. The connected records confirm the affected product/version and the...
CVE-2000-0480
Summary: CVE-2000-0480 affects Dragon Telnet Server. A remote attacker can cause a denial of service by sending an excessively long username. The issue is network-accessible with low complexity and no authentication. Nessus details indicate the remote overflow occurs when a login name exceeds abo...
CVE-2000-0480
Dragon telnet server allows remote attackers to cause a denial of service via a long username...
CVE-2000-0480
Dragon telnet server allows remote attackers to cause a denial of service via a long username...
CVE-1999-0480
Midnight Commander 4.x is affected by a local denial of service via a symlink attack. The connected PT-1999-1160 entry confirms the issue in Midnight Commander 4.x and attributes it to a symlink-based condition exploitable by a local attacker to trigger DoS. No remediation or patched versions are...