CVE-2008-0532

CVE-2008-0532 describes a vulnerability in Cisco Secure Access Control Server (ACS) UCP, where multiple buffer overflows in CSuserCGI.exe allow remote code execution. An attacker can exploit a long argument following the Logout parameter to inject and run arbitrary code on affected systems. Affec...

RecurityLabs_Cisco_ACS_UCP_advisory.txt

Recurity Labs GmbH http://www.recurity-labs.com [email protected] Date: 12.03.2008 Vendor: Cisco Systems Product: Cisco Secure Access Control Server ACS for Windows User-Changeable Password UCP application Vulnerability: Multiple remote pre-authentication buffer overflows Cross Site...

CVE-2007-0532

CVE-2007-0532 affects Tuan Do Uploader (aka php-uploader) 6 beta 1. The issue is insufficient access control that allows remote attackers to access the administrator password hash by directly requesting userdata/user_1.txt under the web root. The root cause is improper protection of sensitive dat...

CVE-2006-0532

Cross-site scripting XSS vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute...

CVE-2006-0532

CVE-2006-0532 describes an XSS vulnerability in resultat.asp of SoftMaker Shop. The attack vector is a crafted strSok parameter containing a javascript: URI in an IMG SRC, enabling remote script injection. Impact is partial integrity compromise with no confidentiality or availability impact per C...

BELL-CVE-2005-0532 CVE-2005-0532 does not affect BellSoft software

Bulletin has no description...

CVE-2005-0532

The CVE-2005-0532 issue affects the Linux kernel: the reiserfs_copy_from_user_to_file_region function in reiserfs/file.c is vulnerable on 64-bit architectures for kernel 2.6.10/2.6.11 before 2.6.11-rc4, where casting discrepancies between size_t and int can trigger a local buffer overflow. Impact...

CVE-2003-0532

Technical details for CVE-2003-0532 are not publicly available in the provided documents. The connected items discuss other Internet Explorer vulnerabilities (not CVE-2003-0532) such as CVE-2003-0838 and HTA-related issues; monitor for updates.

CVE-2002-0532

EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...

CVE-2002-0532

EMU Webmail allows local users to execute arbitrary programs via a .. dot dot in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters...

CVE-2000-0532

Summary (CVE-2000-0532) : A FreeBSD patch for SSH on 2000-01-14 configures SSH to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is filtered. This is documented in multiple sources (NVD/CVE records). The available documents...

CVE-1999-0532

CVE-1999-0532 denotes a DNS zone transfer disclosure. The provided connected docs confirm that a DNS server may allow AXFR zone transfers, enabling an attacker to enumerate zone data. Evidence includes references to a Metasploit DNS enumeration module and various scanners (OpenVAS, Nessus plugin)...