CVE-2008-0714

CVE-2008-0714 affects Mihalism Multi Host via the vulnerable file users.php in the lost_password_go flow, where the username parameter is susceptible to SQL injection . The underlying issue is improper input handling, enabling remote attackers to execute arbitrary SQL commands. Public references ...

ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability

ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-010.html March 7, 2007 -- CVE ID: CVE-2007-0714 -- Affected Vendor: Apple -- Affected Products: Quicktime Player 7.1 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows. An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a...

CVE-2007-0714

Apple QuickTime UDTA atom integer overflow vulnerability (CVE-2007-0714) exists in parsing of UDTA data in QuickTime files. A crafted MOV file can trigger an integer overflow, leading to a heap overflow and potential remote code execution under the user’s context. Affected products are QuickTime ...

CVE-2006-0714

Directory traversal vulnerability in the installation file sql/install-0.9.7.php in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. dot dot sequence in the adodbpath parameter...

CVE-2006-0714

Flyspray 0.9.7 is vulnerable to a directory traversal/remote file inclusion in the installation script sql/install-0.9.7.php via the adodbpath parameter. The adodbpath input is unsafely used in include_once(), allowing an unauthenticated attacker to view arbitrary files and potentially execute PH...

Exchange XEXCH50 Remote Buffer Overflow

This system appears to be running a version of the Microsoft Exchange SMTP service that is vulnerable to a flaw in the XEXCH50 extended verb. SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

CVE-2004-0714

Cisco IOS SNMP processing in releases 12.0S, 12.1E, 12.2, 12.2S, 12.3, 12.3B, and 12.3T contains a vulnerability in handling SNMP requests that, when exploited remotely, could cause the device to reload and potentially memory corruption. The issue is triggered by solicited SNMP operations on UDP ...

Immunity Canvas: MSXEXCH50

Name| msxexch50 ---|--- CVE| CVE-2003-0714 Exploit Pack| CANVAS Description| MS Exchange 2000 XEXCH50 integer overflow ms03-046 Notes| CVE Name: CVE-2003-0714 VENDOR: Microsoft MSADV: MS03-046 MSRC: http://www.microsoft.com/technet/security/bulletin/ms03-046.asp NOTE: CVE Url:...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

CVE-2003-0714

CVE-2003-0714 affects Microsoft Exchange Server’s Internet Mail Service in Exchange Server 5.5 and Exchange 2000. The issue enables remote attackers to cause a denial of service via memory exhaustion by connecting to SMTP and issuing a specific extended verb request, with a potential buffer overf...

CVE-2002-0714

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...

CVE-2002-0714

The advisory scope confirms that CVE-2002-0714 affects the Squid FTP proxy prior to 2.4.STABLE6, where the FTP control and data channel addresses were not compared to the FTP server’s address. This allowed remote attackers to bypass firewall rules or spoof FTP server responses. Multiple connected...

CVE-2002-0714

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...

CVE-2002-0714

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...

CVE-2002-0714

FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses...

CVE-2001-0714

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service data loss by 1 setting a high initial message hop count option -h, which causes Sendmail to drop queue entries, 2 via the -qR option, or 3 via the -qS option...

CVE-2001-0714

The CVE-2001-0714 entry describes a local DoS in Sendmail pre-8.12.1 where an attacker can cause data loss by abusing queue processing options: setting a high initial hop count (-h), or using -qR/-qS, if RestrictQueueRun is not enabled. Connected sources (NVD, Nessus plugins, OpenVAS NASL) confir...

CVE-2001-0714

Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service data loss by 1 setting a high initial message hop count option -h, which causes Sendmail to drop queue entries, 2 via the -qR option, or 3 via the -qS option...

CVE-2000-0714

The CVE-2000-0714 issue concerns umb-scheme 3.2-11 for Red Hat Linux, which is installed with world-writable files. This local-access vulnerability arises from permissions allowing modification of files by any user, potentially compromising integrity and confidentiality of affected components. Th...