CVE-2008-0694

The CVE-2008-0694 entry concerns IBM OS/400 HTTP Server (versions V5R3M0 and V5R4M0). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. Affected component is the HTTP Server handling Expect header...

CVE-2008-0694

Cross-site scripting XSS vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header...

Debian: Security Advisory (DSA-384)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0694

DGNews 2.1 is affected by a cross-site scripting (XSS) vulnerability in footer.php that allows remote attackers to inject arbitrary web script or HTML via the copyright parameter. The issue arises when user-controlled content is reflected back in the page, enabling script execution in the victim’...

CVE-2006-0694

CVE-2006-0694 affects Ansilove (loaders: load_*.php) before version 1.03. The vulnerability allows remote attackers to read arbitrary files via unspecified vectors involving “converting files accessible by the webserver.” Impact is limited to partial confidentiality. The available documents do no...

Unchecked Buffer in Windows Help (Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-0694

This CVE affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where log files are stored under the web root. An attacker can directly request HCDiskQuotaService.csv to disclose sensitive information, specifically the list of hosted domains. The issue is an information disclosure flaw in the HCD...

HP-UX PHNE_29912 : HP-UX sendmail, Remote Unauthorized Privileged Access (HPSBUX00281 SSRT3631 rev.11)

s700800 11.22 sendmail1m 8.11.1 patch : A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681. %NASLMINLEVEL 70300 C Tenable...

AIX 5.1 : IY48658

The remote host is missing AIX Critical Security Patch number IY48658 Sendmail prescan vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.2 : IY48657

The remote host is missing AIX Critical Security Patch number IY48657 Sendmail prescan vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

RHEL 2.1 : sendmail (RHSA-2003:284)

Updated Sendmail packages that fix a potentially-exploitable vulnerability are now available. Sendmail is a widely used Mail Transport Agent MTA and is included in all Red Hat Enterprise Linux distributions. There is a bug in the prescan function of Sendmail versions prior to and including 8.12.9...

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...

CVE-2003-0694

CVE-2003-0694 affects Sendmail 8.12.9, where the prescan function (parsing SMTP headers in parseaddr.c) can be exploited remotely via a buffer overflow to execute arbitrary code. Debian DSA-384 also references CAN-2003-0694 in its two vulnerabilities entry. The available documents confirm affecte...

CVE-2003-0694

The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c...

Sendmail < 8.12.10 prescan() Function Remote Overflow

According to its version number, the remote Sendmail server is between 5.79 to 8.12.9. Such versions are reportedly vulnerable to remote buffer overflow attacks, one in the 'prescan' function and another involving its ruleset processing. A remote user may be able to leverage these issues to gain...

CVE-2002-0694

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0694

CVE-2001-0694 affects WFTPD 3.00 R5 with a directory traversal vulnerability exposed via a dot-dot sequence in the CD command. The vulnerability allows a remote attacker to view arbitrary files, impacting confidentiality and integrity (CVSS v2 base score 7.5, HIGH; network attack, low complexity,...