CVE-2005-0549

CVE-2005-0549 is a cross-site scripting (XSS) vulnerability in Sun/ Solaris AnswerBook2 Documentation 1.4.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the View Log Files function. Affected software is explicitly Sun AnswerBook2 documentation prior to...

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine MSHTML, as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript,...

RHEL 2.1 : gdm (RHSA-2003:259)

Updated GDM packages are available which correct a local crash if XDMCP is enabled. GDM is the GNOME Display Manager for X. Two bugs have been found in the X Display Manager Control Protocol XDMCP which could allow a denial of service attack DoS by crashing the gdm daemon. The Common...

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine MSHTML, as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript,...

CVE-2004-0549

The CVE-2004-0549 vulnerability is a cross-domain navigation/redirect issue in the Internet Explorer rendering stack (WebBrowser ActiveX or MSHTML) used by IE6 and other IE-enabled components. A remote attacker could abuse navigation via delayed HTTP redirects (or manipulated Location headers) an...

CVE-2003-0549

CVE-2003-0549 affects the GNOME Display Manager (GDM) prior to version 2.4.1.6, where the XDMCP feature can be abused to crash the gdm daemon, causing DoS via a short authorization key name. Public records in NVD and vendor advisories describe the issue as stemming from XDMCP handling, with the r...

CVE-2002-0549

Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users...

CVE-2002-0549

Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users...

CVE-2002-0549

CVE-2002-0549 involves cross-site scripting vulnerabilities in Anthill that allow remote attackers to execute scripts as other Anthill users. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication, and partial impact to confi...

CVE-2001-0549

The CVE describes Symantec LiveUpdate 1.5 storing proxy passwords in cleartext in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\LiveUpdate\Preferences\Proxy), allowing local users to read credentials. CERT/CC details confirm local read access to the registry key and recommend upgrading to Li...

Symantec LiveUpdate stores proxy server passwords in plaintext in registry

Overview A vulnerability exists in the way Symantec LiveUpdate stores proxy server passwords which could allow local users to have read access to the key. Description LiveUpdate version 1.5 stores proxy server passwords in clear text in the registry, under...

CVE-2000-0549

CVE-2000-0549 affects Kerberos 4 KDC by not properly checking for null termination in AUTH_MSG_KDC_REQUEST, enabling remote attackers to cause denial of service via a malformed request. The available sources describe the issue as a null-termination handling flaw in the KDC protocol message proces...

CVE-1999-0549

Windows NT automatically logs in an administrator upon rebooting...

CVE-1999-0549

The CVE-1999-0549 entry pertains to Windows NT, where the system automatically logs in an administrator upon reboot. Affected software: Windows NT. Vulnerability: administrative login occurs without user authentication at boot. Root cause and exact exploit vector are not detailed in the provided ...