CVE-2005-0520

CVE-2005-0520 affects ArGoSoft FTP Server prior to version 1.4.2.8. The vulnerability arises from handling shortcut (.LNK) files in the SITE COPY command, enabling remote attackers to read arbitrary files on the server (confidentiality and integrity impacts reported as high). The connected Nessus...

Fedora Core 1 : squirrelmail-1.4.3-0.f1.1 (2004-159)

A SQL injection flaw was found in SquirrelMail version 1.4.2 and earlier. If SquirrelMail is configured to store user addressbooks in the database, a remote attacker could use this flaw to execute arbitrary SQL statements. The Common Vulnerabilities and Exposures project has assigned the name...

CVE-2004-0520

CVE-2004-0520 is a cross-site scripting (XSS) vulnerability in mime.php of SquirrelMail prior to 1.4.3. The issue allows remote attackers to inject arbitrary HTML and script via the content-type mail header, demonstrated via read_body.php. The vulnerability affects the webmail client, with an att...

CVE-2003-0520

CVE-2003-0520 affects Trillian 1.0 Pro and 0.74 Freeware. The issue allows remote attackers to trigger a denial of service (crash) by sending a TypingUser message in which the TypingUser string has been modified. The description in the CVE entries consistently states that the crash is caused by t...

CVE-2003-0520

Trillian 1.0 Pro and 0.74 Freeware allows remote attackers to cause a denial of service crash via a TypingUser message in which the "TypingUser" string has been modified...

CVE-2002-0520

The CVE-2002-0520 entry describes an XSS in ASP-Nuke RC1 via the IMG tag in functions-inc.asp. The root cause is insufficient filtering of content within the [img] tag, allowing remote attackers to execute script in other users’ browsers. The affected software is ASP-Nuke RC1; exploitation detail...

CVE-2001-0520

Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including 1 onload in the BODY tag, 2 href in the A tag, 3 the BUTTON tag, 4 the INPUT tag, or 5 any other tag in which scripts can be...

CVE-2001-0520

CVE-2001-0520 affects Aladdin eSafe Gateway versions 3.0 and earlier. The vulnerability allows a remote attacker to bypass filtering of SCRIPT tags by embedding scripts within certain HTML constructs (e.g., onload in BODY, href in A, BUTTON, INPUT, or other tag-defined scripts). The NVD entry lis...

CVE-2000-0520

CVE-2000-0520 describes a local buffer overflow in the restore program (version 0.4b17 and earlier) within the dump package. The vulnerability allows a local attacker to execute arbitrary commands by supplying a long tape name. Public details in the provided documents do not list affected platfor...

CVE-2000-0520

Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name...

CVE-1999-0520

CVE-1999-0520 concerns a system-critical NETBIOS/SMB share with inappropriate access control. Connected sources corroborate this issue across multiple repositories (NVD, CVE List, Red Hat), describing improper access controls on Windows SMB/NETBIOS shares. The documents do not specify exact affec...