CVE-2008-0537

The CVE-2008-0537 entry concerns Cisco IOS-based platforms (Catalyst 6500 Series and Cisco 7600 Router devices) running Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), or Route Switch Processor 720 (RSP720). The vulnerability occurs when OSPF Sham-Link and MPLS VPN are enabled, allo...

CVE-2008-0537

Unspecified vulnerability in the Supervisor Engine 32 Sup32, Supervisor Engine 720 Sup720, and Route Switch Processor 720 RSP720 for multiple Cisco products, when using Multi Protocol Label Switching MPLS VPN and OSPF sham-link, allows remote attackers to cause a denial of service blocked queue,...

Debian Security Advisory DSA 341-1 (liece)

The remote host is missing an update to liece announced via advisory DSA 341-1. OpenVAS Vulnerability Test $Id: deb3411.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 341-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 3053)

A bug in KHTML could be exploited to conduct cross site scripting XSS attacks. CVE-2007-0537 Another bug allowed attackers to abuse the FTP passive mode for portscans. CVE-2007-1564 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment KDE. Two...

Moderate: kdelibs security update

3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-0537 Konqueror improper HTML comment rendering CVE-2007-1564 FTP protocol PASV design flaw affects konqueror 3.5.4-12.el5 - resolves: 293421,...

CVE-2007-2717

SQL injection vulnerability in shop/page.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the typeid parameter, a different vector than CVE-2005-0537...

CVE-2007-0537

CVE-2007-0537 affects KDE kdelibs (used by Konqueror 3.5.5); the vulnerability arises from improper parsing of HTML comments, enabling remote XSS and bypassing some protections by embedding certain tags within a comment in a title tag. Documented in multiple advisories (Mandrake/MDKSA, RHSA, Open...

CVE-2006-1845

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-0537. Reason: This candidate is a duplicate of CVE-2006-0537. Notes: All CVE users should reference CVE-2006-0537 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-1845

CVE-2006-1845 is rejected; this candidate is not used and refers to CVE-2006-0537.

CVE-2006-0537

Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code via a long RCPT TO argument...

Immunity Canvas: VSPLOIT_EXCHANGEPOP3

Name| vsploitexchangepop3 ---|--- CVE| CVE-2006-0537 Exploit Pack| CANVAS Description| Exchange pop3 rcpt to overflow Notes| CVE Name: CVE-2006-0537 VENDOR: Kinesphere Repeatability: References: http://www.morx.org/adv.txt CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0537...

CVE-2006-0537

CVE-2006-0537 affects the POP3 server of Kinesphere Corporation eXchange prior to version 5.0.060125. The vulnerability is a buffer overflow triggered by a long RCPT TO argument, allowing remote attackers to execute arbitrary code. The advisory and related references indicate this is a network-ac...

CVE-2005-0537

CVE-2005-0537: Multiple SQL injection vulnerabilities in page.php of iGeneric (iG) Shop 1.2 allow remote attackers to inject arbitrary SQL via the parameters cats, l_price, or u_price. The connected records also describe a related SQL injection in iG Shop 1.4 (CVE-2007-2717) via the type_id[] par...

CVE-2005-0537

Multiple SQL injection vulnerabilities in page.php for iGeneric iG Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the 1 cats, 2 lprice, or 3 uprice parameters...

Debian DSA-341-1 : liece - insecure temporary file

liece, an IRC client for Emacs, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and liece, potentially with contents supplied by the attacker...

CVE-2004-0537

Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" favicon that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces...

CVE-2004-0537

Opera 7.50 and earlier is vulnerable to address bar spoofing via the favicon feature. The weakness allows remote web pages to provide a favicon that is wider than expected, enabling spoofing of the apparent domain and facilitating phishing using a wide icon and added spaces. Concrete details acro...

CVE-2004-0537

Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" favicon that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces...

CVE-2003-0537

The liece Emacs IRC client 2.0+0.20030527 and earlier creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users...