CVE-2006-0512

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...

CVE-2005-0512

The CVE-2005-0512 entry describes a remote file inclusion in Mambo Open Source 4.5.2, via Tar.php, where the mosConfig_absolute_path parameter can be altered to reference a URL on a remote server containing PHP code. This allows an attacker to execute arbitrary PHP code on the affected web server...

CVE-2005-0512

PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693...

Mambo Open Source Tar.php Remote File Inclusion

The version of Mambo Open Source on the remote host fails to properly sanitize input passed through the 'mosConfigabsolutepath' parameter of the 'Tar.php' script. Provided PHP's 'registerglobals' setting is enabled, a remote attacker may exploit this vulnerability to cause code to be executed in...

CVE-2005-0512

PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693...

CVE-2004-0512

CVE-2004-0512 refers to multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6/5.0.7 (and possibly other OSes) that may allow a denial of service via a core dump. The Full-Disclosure SCO advisory SCOSA-2004.7 documents buffer overflows, null dereferences, and core dumps affecting MMDF binar...

CVE-2003-0512

Cisco IOS 12.2 and earlier exposes a username-enumeration flaw: when an invalid username is entered, the device shows “% Login invalid” instead of prompting for a password, enabling remote attackers to identify valid usernames and perform brute-force password guessing. Affected product set includ...

CVE-2003-0512

Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge...

CVE-2002-0512

The CVE-2002-0512 entry describes a local privilege escalation in KDE’s startkde (Caldera OpenLinux 2.3–3.1.1). The root cause is that LD_LIBRARY_PATH is set to include the current working directory, allowing a local attacker to influence loaded libraries (Trojan horse libraries) and potentially ...

CVE-2000-0512

CUPS 1.04 and earlier versions are affected: they do not properly delete request files, allowing a remote attacker to cause a denial of service. Exploitation is network-based and does not require authentication; a patch exists (cups-DoS.patch) and related updates are referenced in the CVE context...

CVE-1999-0512

CVE-1999-0512 describes a mail server that is explicitly configured to allow SMTP relaying, enabling abuse by spammers. The connected documents corroborate an open mail-relay condition detected by various scanners (Nessus/OpenVAS) and consistently reference reconfiguring the SMTP server to preven...