97 matches found
CVE-2009-0509
The CVE-2009-0509 entry describes a heap-based buffer overflow in the JBIG2 filter that causes memory corruption and remote code execution. Affected products are Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2. Re...
CVE-2008-0509
IBM AIX 4.3 contains buffer overflow vulnerabilities in the piox25 component and the piox25remote script. A long argument to either piox25 (piox25.c) or piox25remote.sh can be exploited by remote attackers to cause a denial of service (crash) or potentially gain privileges. The provided documents...
[Full-disclosure] Serendipity: Account Hijacking / CSRF Vulnerability
=========================================================== Serendipity: Account Hijacking / CSRF Vulnerability =========================================================== Technical University of Vienna Security Advisory TUVSA-0509-001, September 29, 2005...
CVE-2005-0509
Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...
CVE-2005-0509
CVE-2005-0509 : The connected documents confirm a vulnerability in the Mono 1.0.5 implementation of ASP.NET (.Net) where Unicode representations for ASCII fullwidth characters (e.g., that are converted to normal ASCII like ">" and "
CVE-2005-0509
Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...
CVE-2003-0509
The connected sources confirm a SQL injection vulnerability in Cyberstrong eShop (ASP) affecting version 4.2 and earlier, caused by input validation flaws in the ProductCode parameter used by scripts 10expand.asp, 10browse.asp, and 20review.asp. The OpenVAS/Nessus entries describe remote exploita...
CVE-2002-0509
Transparent Network Substrate TNS Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service CPU consumption via a single malformed TCP packet to port 1521...
CVE-2002-0509
CVE-2002-0509 affects Oracle 9i’s Transparent Network Substrate (TNS) Listener (version 9.0.1.1). A remote attacker can cause a denial of service (CPU consumption) by sending a single malformed TCP packet to port 1521. Root cause and exact vulnerable component are stated only as the TNS Listener ...
CVE-2001-0509
Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...
CVE-2001-0509
Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...
CVE-2001-0509
CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...
CVE-2000-0509
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname...
CVE-2000-0509
CVE-2000-0509 affects Sambar Server 4.3, specifically the finger and whois demonstration scripts. A buffer overflow triggered by a long hostname allows remote attackers to execute arbitrary commands. The connected documents do not provide a patch/version fix; no exploitation details are listed. T...
CVE-2000-0509
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname...
CVE-1999-0509
CVE-1999-0509 describes remote arbitrary-command execution when shell interpreters (Perl, sh, csh, etc.) are installed in the web server’s /cgi-bin directory. The underlying issue is CGI scripts running with the server’s privileges, enabling attackers to execute commands. Affected scenario: a WWW...