100 matches found
CentOS Security Advisory CESA-2009:0326 (kernel)
The remote host is missing updates to kernel announced in advisory CESA-2009:0326. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Debian: Security Advisory (DSA-1749-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Kernel SysKonnect FDDI驱动非授权重置统计漏洞
CVECAN ID: CVE-2009-0675 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/net/skfp/skfddi.c文件中的skfpioctl函数中存在错误的逻辑，本地用户在缺少CAPNETADMIN权限而不是拥有这个权限的时候才可以执行SKFPCLRSTATS请求，因此无需授权便可以重置驱动统计。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2009-0675
The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...
CVE-2009-0675
CVE-2009-0675 affects the Linux kernel up to version 2.6.28.6, where the skfp_ioctl function in drivers/net/skfp/skfddi.c incorrectly allows SKFP_CLR_STATS requests when CAP_NET_ADMIN is absent rather than present, enabling local users to reset driver statistics (inverted logic). The vulnerabilit...
Microsoft Windows Speech Components sapi.dll Code Execution (MS08-032; CVE-2007-0675)
The ActiveX Speech Components sapi.dll is part of the Microsoft Speech Application Programming Interface SAPI that allows the use of speech recognition and speech synthesis within Windows applications. A remote code execution vulnerability has been reported in the ActiveX Speech Components...
CVE-2008-0675
The CVE-2008-0675 entry describes an SQL injection in cms/index.pl of The Everything Development Engine within The Everything Development System (Pre-1.0 and earlier). The vulnerability allows remote attackers to manipulate the database via the node_id parameter. Impact details in the provided so...
CVE-2006-0675
This CVE describes a Cross-site Scripting (XSS) vulnerability in Siteframe 5.0.1, exposed via the q parameter in search.php. The root cause is improper handling of user-supplied input leading to script or HTML injection, enabling remote attackers to execute script in a victim’s browser. The NVD n...
CVE-2005-0675
CVE-2005-0675 affects Zorum 3.5. A Cross-site scripting (XSS) vulnerability exists in index.php, exploitable via the list or frommethod parameters to inject arbitrary script/HTML. This is a remote, unauthenticated vector with impact limited to client-side script execution; no remediation details ...
CVE-2004-0675
Cross-site scripting XSS vulnerability in 1 cart32.exe or 2 c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command...
CVE-2004-0675
CVE-2004-0675 is a cross-site scripting (XSS) vulnerability in Cart32 shopping cart components cart32.exe and c32web.exe. The flaw allows an attacker to inject arbitrary script via the cart32 parameter to the GetLatestBuilds command, with CVSS v2 base score 6.8 (network, medium complexity, no pri...
CVE-2002-0675
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...
CVE-2002-0675
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...
CVE-2002-0675
The CVE affects Pingtel xpressa SIP phones (model PX-1) with software versions 1.2.5–1.2.7.4. The root cause is that firmware upgrades can be performed without administrative privileges, enabling an unauthorized user to upgrade the phone. The accompanying @stake advisory details multiple vulnerab...
CVE-2001-0675
The Bat! (RIT Research Labs) for Windows (The Bat! v1.51) is affected by a vulnerability where a remote attacker can trigger a denial of service by delivering an email containing a carriage return CR not followed by a LF. This incorrect RFC822 parsing can cause premature end-of-message handling, ...
CVE-2001-0675
Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return that is not followed by a line feed...
CVE-2001-0675
Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return that is not followed by a line feed...
CVE-2000-0675
Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.
CVE-1999-0675
CVE-1999-0675 : The vulnerability affects Check Point FireWall-1. An attacker can cause a denial of service by sending UDP packets through VPN-1 to port 0 of a host, potentially crashing the remote host or the firewall between the attacker and the target. The available sources describe this DoS c...