116 matches found
CVE-2008-0620
SAPlpd (SAPLPD) vulnerability CVE-2008-0620 affects SAPlpd in SAP GUI packages up to version 6.28/7.10 with SAPSprint prior to 1018. The issue arises when handling LPD commands: multiple buffer/overflow conditions are triggered by long parameters for commands 0x01–0x05, 0x31–0x35, potentially all...
Debian Security Advisory DSA 364-1 (man-db)
The remote host is missing an update to man-db announced via advisory DSA 364-1. OpenVAS Vulnerability Test $Id: deb3641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 364-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-364)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-0620
CVE-2007-0620 affects FD Script prior to or including 1.3.2. The vulnerability exists in download.php, where a relative pathname supplied by the fname parameter can cause the web server to disclose source files under the document root (e.g., config.php) with certain extensions (including .php). T...
CVE-2006-0620
CVE-2006-0620 describes a race condition in the phfont component of QNX Neutrino RTOS 6.2.1. The flaw allows local users to execute arbitrary code through unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables. Connected documents do not provide additional technical specif...
CVE-2005-0620
The CVE-2005-0620 entry concerns Einstein 1.0, where credit card information is stored in plaintext within the world-readable wallets.dat. This plaintext storage enables local users to access sensitive data. The description confirms the affected component (wallets.dat containing credentials) and ...
CVE-2004-0620
The CVE-2004-0620 issue affects vBulletin versions around 3.0.1, where the XSS flaw exists in the newreply.php and newthread.php code (Edit-panel) that allows a remote attacker to inject HTML/script as another user. OpenVAS entries frame this as a vulnerability in vBulletin
CVE-2003-0620
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...
CVE-2003-0620
Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via 1 MANDATORYMANPATH, MANPATHMAP, and MANDBMAP arguments to addtodirlist in manp.c, 2 a long pathname to ultsrc in ultsrc.c, 3 a long .so argument to testforinclude in ultsrc.c, 4 ...
CVE-2003-0620
CVE-2003-0620 affects the man-db package (versions up to 2.4.1 and earlier) when run setuid. The issue comprises multiple local privilege-escalation bugs in the code paths for add_to_dirlist (manp.c), ult_src (ult_src.c), and test_for_include (ult_src.c), plus oversized MANDATORY_MANPATH/MANPATH_...
CVE-2002-0620
CVE-2002-0620 describes a buffer overflow in the Profile Service of Microsoft Commerce Server 2000. The vulnerability enables remote attackers to cause the server to fail or execute arbitrary code in the LocalSystem context by supplying input through an affected API call. The available documents ...
CVE-2000-0620
The vulnerability CVE-2000-0620 affects the libX11 X library. A resource mask of 0 can cause the library to enter an infinite loop, enabling remote denial of service. The description indicates a network-exposed condition with a potential impact to availability, but the documents do not provide a ...
CVE-2001-0620
iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...
CVE-2000-0620
libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop...