88 matches found
CVE-2005-0531
CVE-2005-0531 refers to a bug in the Linux kernel (2.6.10 and 2.6.11 before 2.6.11-rc4) where the atm_get_addr function in addr.c could be triggered by negative length arguments, allowing a local user to overwrite substantial kernel memory. The issue stems from insufficient input validation in th...
CVE-2003-0531
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability...
CVE-2003-0531
CVE-2003-0531 maps to a vulnerability in Internet Explorer (IE) 5.01 SP3 through 6.0 SP1 where crafted Content-Type and Content-Disposition headers enable a remote attacker to access and execute script in the My Computer zone via the browser cache. The underlying flaw is IE’s handling of these he...
CVE-2002-0531
EMU Webmail vulnerability: directory traversal in emumail.cgi affects 4.5.x and 5.1.0, allowing read/list of arbitrary files via .. in the type parameter. Root cause is path traversal in the type parameter; exploitation details and remediation are not provided in the supplied documents.
CVE-2002-0531
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...
CVE-2002-0531
Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in the type parameter...
CVE-2000-0531
CVE-2000-0531 : Linux gpm program vulnerability where local users can cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. The NVD entry shows a LOCAL attack vector, LOW base severity, and PARTIAL availability impact; no remediation or workaround details are provided ...
CVE-1999-0531
The connected documents describe a vulnerability class where an SMTP service that supports commands like VRFY and EXPN can enumerate valid user accounts (revealing aliases or mailing lists). The evidence includes a Metasploit module (SMTP User Enumeration Utility) and CIRCL/CVE references linking...