112 matches found
CVE-2005-0486
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the...
CVE-2005-0486
CVE-2005-0486 affects Tarantella Secure Global Desktop Enterprise Edition (3.42–4.00) and Tarantella Enterprise 3 (3.30–3.40). When RSA SecurID is used and multiple users share the same username, authentication can disclose sensitive info, enabling remote attackers to identify valid usernames and...
CVE-2004-0486
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler...
CVE-2004-0486
CVE-2004-0486 affects Apple Mac OS X HelpViewer in 10.3.3 and 10.2.8, where it can process scripts it did not initiate, potentially allowing arbitrary code execution. The issue originated from a directory-traversal vulnerability in the Safari runscript handling within a help: URI, identified as C...
CVE-2003-0486
The CVE covers a SQL injection in phpBB's viewtopic.php (topic_id parameter) affecting phpBB 2.0.5 and earlier. The root cause is improper handling of user-supplied topic_id, enabling an attacker to exfiltrate password hashes. Connectivity details in the provided documents indicate risk of remote...
CVE-2002-0486
Affected: Intellisol Xpede 4.1. The CVE-2002-0486 entry describes that the product stores authentication information in cookies using weak encryption, enabling local access to cookies to escalate privileges. Root cause: weak encryption used for cookie-stored credentials. Impact: according to NVD ...
CVE-2001-0486
CVE-2001-0486 affects Novell BorderManager 3.6 and earlier. Remote attackers can cause a denial of service by sending a TCP SYN flood to port 353. Metrics indicate a Network attack with low complexity and no authentication, yielding a base score of 5.0 (Medium) and Partial Availability impact. No...
CVE-2001-0486
Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353...
CVE-2000-0486
Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...
CVE-2000-0486
Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...
CVE-1999-0486
CVE-1999-0486 affects AOL Instant Messenger. A remote attacker sending a malicious hyperlink to a receiving client can trigger a denial of service, potentially crashing the system. Multiple connected sources (Red Hat advisory, CVE lists, NVD/NIST entry) corroborate the basic impact and vector as ...