98 matches found
FreeBSD Ports: heimdal
The remote host is missing an update to the system as announced in the referenced advisory. VID b62c80c2-b81a-11da-bec5-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0677
CVE-2008-0677 concerns an SQL injection in blog.php of A-Blog 2, triggered via the id parameter in a news action. The underlying issue is improper input handling in a PHP-based blog component, allowing an attacker to craft the id value to modify the SQL query executed by the application. Impact, ...
CVE-2007-0677
CVE-2007-0677 affects the Cadre PHP Framework (version cited as 20020724) with a vulnerability in fw/class.Quick_Config_Browser.php. The issue is a PHP remote file inclusion via a URL supplied in the GLOBALS[config][framework_path] parameter, allowing an attacker to execute arbitrary PHP code rem...
[SECURITY] [DSA 977-1] New heimdal packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 977-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2006 http://www.debian.org/security/faq -...
CVE-2006-0677
CVE-2006-0677 affects Heimdal telnetd (0.6.x before 0.6.6 and 0.7.x before 0.7.2). A remote attacker can cause a denial-of-service by triggering a null dereference in the telnet server, crashing inetd or the service before user login. Affected advisories reference Heimdal telnetd vulnerability an...
CVE-2005-0677
CVE-2005-0677 affects Zorum 3.5 where the file index.php allows remote attackers to perform certain actions as other users by modifying the id parameter. The underlying issue is parameter manipulation that enables privilege escalation within the application, leading to actions executed with anoth...
CVE-2005-0677
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter...
CVE-2004-0677
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...
CVE-2004-0677
CVE-2004-0677 affects Fastream NETFile FTP Server 6.7.2.1085 and earlier. The issue allows remote attackers to cause a denial-of-service (temporary hang) by issuing a cd command with an unusual argument, potentially involving multiple leading slashes or an access to the floppy drive ("A"). The de...
CVE-2003-0677
CVE-2003-0677 affects Cisco CSS 11000 routers on the CS800 chassis. The vulnerability enables denial of service via a flood of TCP SYN packets to the circuit IP address, causing high CPU usage or a reboot. The available documents do not provide specific affected firmware versions or official fixe...
CVE-2002-0677
CDE ToolTalk database server ttdbserver allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTHUNIX procedure call, which is used as a table index by the TTISCLOSE procedure...
CVE-2001-0677
Eudora 5.0.2 is affected. A remote attacker can read arbitrary files by crafting an email whose Attachment Converted MIME header contains the path to a target file; when the user forwards the message, the file is sent to the attacker. Root cause involves improper handling of the Attachment Conver...
CVE-2001-0677
Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when the email is forwarded to the attacker by the user...
CVE-2000-0677
Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATHINFO environmental variable...
CVE-2000-0677
Buffer overflow in IBM Net.Data db2www CGI (PATH_INFO) allows remote code execution. Affected: IBM Net.Data db2www CGI; Root cause: stack overflow triggered by a long PATH_INFO environmental variable. Impact: remote attacker could execute arbitrary code with web server privileges (high risk; CVSS...
CVE-2000-0677
Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATHINFO environmental variable...
CVE-1999-0677
CVE-1999-0677 affects the WebRamp web administration utility, with a default password that enables unauthorized access. The NVD entry reports a CVSSv2 base score of 7.5 (Network attack, Low attack complexity, No authentication required, Partial impact on confidentiality, integrity, and availabili...