Fixed in Apache Tomcat 6.0.20

Note: These issues were fixed in Apache Tomcat 6.0.19 but the release vote for that release candidate did not pass. Therefore, although users must download 6.0.20 to obtain a version that includes fixes for these issues, 6.0.19 is not included in the list of affected versions. Important:...

CVE-2009-0580

creationtimestamp| type| source ---|---|--- 2009-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33023 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcatenum.rb 2025-02-06 03:13:39+00:00| seen|...

Vim多个插件字符转义任意命令执行漏洞

BUGTRAQ ID: 32462,32463 CVECAN ID: CVE-2008-3074,CVE-2008-3074 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的tar.vim和zip.vim插件中shellescape函数没有正确地转义所有项（“!”字符）。如果用户使用tar.vim插件打开了TAR文档的话，就会导致以运行Vim用户的权限执行任意指令。 VIM Development Group VIM 7.1 VIM Development Group VIM 7.0 RedHat ------...

RHEL 5 : vim (RHSA-2008:0580)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0580 advisory. - vim format string flaw CVE-2007-2953 - vim: command execution via scripts not sanitizing inputs to execute and system CVE-2008-2712 - Vim...

Gentoo Security Advisory GLSA 200502-30 (cmd5checkpw)

The remote host is missing updates announced in advisory GLSA 200502-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-0580

Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, which makes it easier for local users to obtain this key without reverse engineering...

CVE-2007-0580

CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...

Multiple Products Directory Server LDAP Buffer Overflows (CVE-2006-0468; CVE-2006-0580; CVE-2006-0647; CVE-2006-0717; CVE-2006-4510; CVE-2011-0917)

...

CVE-2005-0580

CVE-2005-0580 affects cmd5checkpw, where the setuid program does not drop privileges before invoking execvp, enabling local users to read the /etc/poppasswd file. Connected sources (Gentoo GLSA 200502-30, Red Hat advisory, NVD/CVE entry, OpenVAS plugin) corroborate that the root cause is improper...

CVE-2005-0580

cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file...

CVE-2004-0580

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information...

CVE-2004-0580

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information...

CVE-2004-0580

CVE-2004-0580 affects Linksys BEFSR11/BEFSR41/BEFSR81/BEFSRU31 Cable/DSL routers running firmware 1.45.7. The issue is that BOOTP replies do not properly clear previously used buffer contents, enabling remote attackers to obtain sensitive information from memory. The NVD entry notes a network-exp...

CVE-2003-0580

Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument...

CVE-2003-0580

CVE-2003-0580 : A buffer overflow in uvadmsh affects IBM U2 UniVerse 10.0.0.9 and earlier, allowing the local uvadm user to execute arbitrary code via a long -uv.install command line argument. The vulnerability is caused by overflowing a buffer when handling the -uv.install parameter, with the do...

CVE-2002-0580

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks...

CVE-2002-0580

The CVE-2002-0580 entry concerns WorkforceROI Xpede 4.1. The provided materials indicate that remote attackers can obtain the database username by requesting datasource.asp, which leaks the username in a form. This exposure can facilitate easier brute-force password guessing attacks against the d...

CVE-2001-0580

Hughes Technologies Virtual DNS VDNS Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection...

CVE-2001-0580

The CVE-2001-0580 entry affects Hughes Technologies Virtual DNS (VDNS) Server 1.0. A remote attacker can cause a denial-of-service by connecting to TCP port 6070, sending data, and closing the connection. The issue is described in the NVD entry as enabling partial availability impact (availabilit...

CVE-2000-0580

CVE-2000-0580 affects Windows 2000 Server. It enables remote denial of service by sending a continuous stream of binary zeros to various TCP/UDP ports, causing significant CPU utilization. The provided documents do not specify a patch, workaround, affected versions beyond Windows 2000 Server, or ...