CVE-2007-0649

Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...

CVE-2007-0649

CVE-2007-0649 affects OpenEMR 2.8.2 and earlier. A variable overwrite vulnerability in interface/globals.php allows remote attackers to overwrite arbitrary program variables and perform other actions. Related vectors include (a) remote file inclusion via the srcdir parameter in custom/import_xml....

CVE-2006-0649

DataparkSearch is affected by a cross-site scripting (XSS) vulnerability in versions prior to 4.37, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The vulnerability impact and exploit details are not provided beyond the generic XSS description; no remediation i...

Microsoft SQL Server 2000 resolution service buffer overflow

Added: 02/05/2006 CVE: CVE-2002-0649 BID: 5310 OSVDB: 4577 Background Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs...

Microsoft SQL Server 2000 resolution service buffer overflow

Added: 02/05/2006 CVE: CVE-2002-0649 BID: 5310 OSVDB: 4577 Background Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs...

Microsoft SQL Server 2000 resolution service buffer overflow

Added: 02/05/2006 CVE: CVE-2002-0649 BID: 5310 OSVDB: 4577 Background Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs...

MS02-039 Microsoft SQL Server Resolution Overflow

This is an exploit for the SQL Server 2000 resolution service buffer overflow. This overflow is triggered by sending a udp packet to port 1434 which starts with 0x04 and is followed by long string terminating with a colon and a number. This module should work against any vulnerable SQL Server 200...

CVE-2005-0649

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

CVE-2005-0649

Pixel-Apes SafeHTML prior to version 1.2.1 is vulnerable to bypassing XSS protection via hexadecimal HTML entities. Affected: SafeHTML component (pre-1.2.1). Root cause: input handling allows bypass of HTML entity encoding to defeat XSS protections. Impact: potential remote XSS. Exploitation deta...

MS-SQL Monitor Protocol (CVE-2002-0649; CVE-2002-0650)

...

Debian DSA-530-1 : l2tpd - buffer overflow

Thomas Walpuski reported a buffer overflow in l2tpd, an implementation of the layer 2 tunneling protocol, whereby a remote attacker could potentially cause arbitrary code to be executed by transmitting a specially crafted packet. The exploitability of this vulnerability has not been verified...

Debian DSA-368-1 : xpcd - buffer overflow

Steve Kemp discovered a buffer overflow in xpcd-svga which can be triggered by a long HOME environment variable. This vulnerability could be exploited by a local attacker to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2004-0649

Buffer overflow in writepacket in control.c for l2tpd may allow remote attackers to execute arbitrary code...

CVE-2004-0649

CVE-2004-0649 describes a buffer overflow in l2tpd's write_packet function (control.c) that could allow a remote attacker to execute arbitrary code. The vulnerability affects older l2tpd versions, with OpenVAS guidance explicitly noting upgrades to 0.69 or later as the remedy. NVD CVSS suggests a...

CVE-2003-0649

Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0649

...

CVE-2003-0649

Buffer overflow in xpcd-svga for xpcd 2.08 and earlier allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0649

Affected product: xpcd (including xpcd-svga) prior to version 2.08. Root cause: buffer overflow in xpcd-svga where a long HOME environment variable is copied into a fixed-size buffer in pcd_open. Impact: local attackers could execute arbitrary code (with the Debian/Mandrake notes indicating poten...

CVE-2002-0649

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 MSDE allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which 1 a 0x04 byte that causes the SQL Monitor thread to generate...

CVE-2002-0649

CVE-2002-0649 describes a remote buffer-overflow in the SQL Server Resolution Service of Microsoft SQL Server 2000 and MSDE (port 1434/UDP). The vulnerability is triggered by UDP packets beginning with 0x04 (long registry key name) or 0x08 (long string), which can cause a denial of service or arb...