118 matches found
Sun Java JRE Applet Handling Privilege Escalation (231261)
The version of Sun Java Runtime Environment JRE installed on the remote host reportedly contains two vulnerabilities that may independently allow an untrusted application or applet to elevate its privileges by, for example, granting itself permission to read and write local files or execute local...
CVE-2008-0657
CVE-2008-0657 affects Sun JDK/JRE: Java 2 Platform versions in scope include JRE/JDK 6 Update 1 and earlier, and 5.0 Update 13 and earlier. The underlying issue is multiple, unspecified vulnerabilities in the Java Runtime Environment that allow an untrusted application or applet to elevate privil...
CVE-2007-0657
CVE-2007-0657 affects Nexuiz 2.2.2. The vulnerability allows remote attackers to read and overwrite arbitrary files through the gamedir command, constituting a remote file access/modify risk. The available sources consistently describe an unspecified vulnerability enabling file system access via ...
CVE-2006-0657
CVE-2006-0657 affects Softcomplex’s PHP Event Calendar 1.5. The issue is a vulnerability in the usernames/passwords handling, where inputs are written to users.php without sanitization, enabling potential cross‑site scripting (XSS) or direct static code injection that could corrupt data. Descript...
CVE-2005-0657
CVE-2005-0657 describes a directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x up to 3.4.4. The issue allows remote attackers to read arbitrary files or cause an application crash via a .. (dot dot) sequence in an HTTP request. Affected component is CProxy Server; root cause is...
CVE-2005-0657
Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service application crash via a .. dot dot in an HTTP request...
CVE-2004-0657
Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...
CVE-2004-0657
Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...
CVE-2003-0598
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0657. Reason: This candidate is a reservation duplicate of CVE-2003-0657. Notes: All CVE users should reference CVE-2003-0657 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2003-0657
...
CVE-2003-0598
CVE-2003-0598 is a reservation duplicate of CVE-2003-0657 (NVD entry notes this and instructs reference to CVE-2003-0657). The active vulnerability described in the connected records is CVE-2003-0657: multiple SQL injection vulnerabilities in the infolog module of phpgroupware, affecting 0.9.14 a...
CVE-2002-0657
Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key...
CVE-2002-0657
OpenSSL 0.9.7 before beta3 with Kerberos enabled is vulnerable to a buffer overflow triggered by a long master key, allowing potential remote arbitrary code execution. This CVE (CVE-2002-0657) is described in the initial document as affecting OpenSSL 0.9.7 prior to 0.9.7-beta3 and enabling Kerber...
Vulnerability in OpenSSL CVE-2002-0657
A buffer overflow when Kerberos is enabled allowed attackers to execute arbitrary code by sending a long master key. Note that this flaw did not affect any released version of 0.9.6 or 0.9.7. Found by OpenSSL Group A.L. Digital...
CVE-2000-0657
The vulnerability CVE-2000-0657 affects AnalogX Proxy Server versions 4.04 and earlier. It is a buffer overflow triggered by a long HELO command in SMTP, leading to a remote-denial of service. The provided documents do not include a remediation or a confirmed exploit status. No further technical ...
CVE-2000-0657
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...
CVE-1999-0657
Technical details for CVE-1999-0657 are not publicly provided in the supplied documents; there is only a generic note that WinGate is involved. Monitor for updates from official advisories for specifics on affected versions, impact, and fixes.