114 matches found
CentOS 3 / 4 : mailman (CESA-2006:0486)
An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...
CVE-2006-0486
CVE-2006-0486 affects Cisco IOS releases, specifically 12.2S trains (MR 25+), 12.3T, and 12.4, where a Tcl Shell process can be reused across login sessions for different local users if tclquit isn’t issued. This could allow subsequent users to run unintended commands or bypass AAA checks. The is...
CVE-2005-0486
CVE-2005-0486 affects Tarantella Secure Global Desktop Enterprise Edition (3.42–4.00) and Tarantella Enterprise 3 (3.30–3.40). When RSA SecurID is used and multiple users share the same username, authentication can disclose sensitive info, enabling remote attackers to identify valid usernames and...
CVE-2005-0486
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the...
CVE-2004-0486
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler...
CVE-2004-0486
CVE-2004-0486 affects Apple Mac OS X HelpViewer in 10.3.3 and 10.2.8, where it can process scripts it did not initiate, potentially allowing arbitrary code execution. The issue originated from a directory-traversal vulnerability in the Safari runscript handling within a help: URI, identified as C...
CVE-2003-0486
The CVE covers a SQL injection in phpBB's viewtopic.php (topic_id parameter) affecting phpBB 2.0.5 and earlier. The root cause is improper handling of user-supplied topic_id, enabling an attacker to exfiltrate password hashes. Connectivity details in the provided documents indicate risk of remote...
CVE-2002-0486
Affected: Intellisol Xpede 4.1. The CVE-2002-0486 entry describes that the product stores authentication information in cookies using weak encryption, enabling local access to cookies to escalate privileges. Root cause: weak encryption used for cookie-stored credentials. Impact: according to NVD ...
CVE-2001-0486
CVE-2001-0486 affects Novell BorderManager 3.6 and earlier. Remote attackers can cause a denial of service by sending a TCP SYN flood to port 353. Metrics indicate a Network attack with low complexity and no authentication, yielding a base score of 5.0 (Medium) and Partial Availability impact. No...
CVE-2001-0486
Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353...
CVE-2000-0486
Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...
CVE-2000-0486
Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...
CVE-1999-0486
CVE-1999-0486 affects AOL Instant Messenger. A remote attacker sending a malicious hyperlink to a receiving client can trigger a denial of service, potentially crashing the system. Multiple connected sources (Red Hat advisory, CVE lists, NVD/NIST entry) corroborate the basic impact and vector as ...