CVE-2006-0627

CVE-2006-0627 affects Clever Copy (versions 2.0, 2.0a, and 3.0). The vulnerability is a cross-site scripting flaw where HTTP Referer and HTTP_X_FORWARDED_FOR headers are not properly handled when an administrator accesses Site Stats, allowing injection of arbitrary script/HTML. The provided docum...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

CVE-2003-0627

CVE-2003-0627 refers to a DoS issue in PeopleSoft PeopleBooks Search CGI (psdoccgi.exe) affecting PeopleTools versions 8.4–8.43. The vulnerability arises from headername/footername argument handling, which can cause the application to crash when processing crafted input, enabling remote attackers...

CVE-2005-0627

CVE-2005-0627 (Qt) : Qt before 3.3.4 searches the BUILD_PREFIX directory, which can be world-writable, to load shared libraries, effectively bypassing LD_LIBRARY_PATH and enabling a local user to execute arbitrary code. Affected product/versions: Qt up to 3.3.x prior to 3.3.4. Impact: local privi...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

Immunity Canvas: MYSQL_AUTH_BYPASS

Name| mysqlauthbypass ---|--- CVE| CVE-2004-0627 Exploit Pack| CANVAS Description| MySQL authentication bypass Notes| CVE Name: CVE-2004-0627 OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=7475 Notes: Mysql authentication can be bypass by a special crafted password with zeroed-strings...

CVE-2002-0627

The CVE-2002-0627 issue concerns the Polycom ViewStation Web server prior to version 7.2.4, where authentication can be bypassed and files read through Unicode-encoded requests. The affected component is the ViewStation web server; the underlying cause is a flaw that permits bypassing access cont...

CVE-2002-0627

The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests...

CVE-2004-0627

CVE-2004-0627 affects MySQL 4.1.x (before 4.1.3) and 5.0. A vulnerability in the check_scramble_323 function allows a remote attacker to bypass authentication by sending a zero-length scrambled string, enabling login to a valid account. The issue is exploitable over the network and is documented ...

CVE-2003-0627

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service application crash, possibly via the headername and footername arguments...

CVE-2002-0627

The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests...

CVE-2001-0627

The CVE cites SCO OpenServer’s vi (5.0.0–5.0.6) as vulnerable: it creates insecure, world-writable temporary files in /tmp with predictable names, allowing a local attacker to exploit a symlink to overwrite arbitrary files writable by the user. The impact is file integrity loss for targeted files...

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack...

CVE-2000-0627

BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as userupdatepasswd.pl and userupdateadmin.pl...

CVE-2000-0627

BlackBoard CourseInfo 4.0 is affected by an authentication flaw that allows local users to modify CourseInfo database information and gain privileges by directly calling supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. The provided documents do not include remediati...

CVE-2000-0627

BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as userupdatepasswd.pl and userupdateadmin.pl...

CVE-1999-0627

The CVE-1999-0627 case concerns the rexd service, reportedly running with weak authentication that can allow an attacker to execute commands. Multiple connected sources reiterate that rexd uses weak/no authentication, enabling command execution on affected systems. The records do not specify exac...

Immunity Canvas: REXD

Name| rexd ---|--- CVE| CVE-1999-0627 Exploit Pack| CANVAS Description| rexd Notes| CVE Name: CVE-1999-0627 Notes: Rexd doesn't do any authentication. This is a known problem VENDOR: Unix CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0627 CVSS: 0.0...