CVE-2004-0722

CVE-2004-0722 relates to an Integer overflow in the SOAPParameter constructor used by Netscape 7.0/7.1 and Mozilla 1.6 (and possibly earlier). The underlying issue can allow remote code execution through a crafted SOAP page or message, as described by multiple advisories. Public details in connec...

CVE-2003-0722

The default installation of sadmind on Solaris uses weak authentication AUTHSYS, which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets...

Immunity Canvas: SADMIND

Name| sadmind ---|--- CVE| CVE-2003-0722 Exploit Pack| CANVAS Description| sadmind Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F56740 CVE Name: CVE-2003-0722 VENDOR: Sun Date public: Sep 16, 2003 CERT Advisory: CVE Url:...

Solaris sadmind AUTH_SYS Credential Remote Command Execution

The remote host is running the sadmind RPC service. It is possible to misuse this service to execute arbitrary commands on this host as root. C Tenable Network Security, Inc. Greatly improved by H D Moore include"compat.inc"; if description scriptid11841; scriptversion"1.34"; scriptcvsdate"Date:...

CVE-2003-0722

The default installation of sadmind on Solaris uses weak authentication AUTHSYS, which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets...

CVE-2003-0722

CVE-2003-0722 affects the Solaris sadmind RPC service, which ships by default with AUTH_SYS. The weakness allows remote/local attackers to spoof Solstice AdminSuite clients and gain root privileges via a sequence of RPC packets. Public details in connected sources show an in-the-wild/poised Metas...

Solaris sadmind Command Execution

This exploit targets a weakness in the default security settings of the Sun Solstice AdminSuite distributed system administration daemon sadmind RPC application. This server is installed and enabled by default on most versions of the Solaris operating system. Vulnerable systems include Solaris 2....

CVE-2002-0722

Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue box to trick users into thinking that the file type is safe to download, aka "File Origin Spoofing."...

CVE-2002-0722

Microsoft Internet Explorer versions 5.01, 5.5, and 6.0 are affected by CVE-2002-0722 due to a UI spoof flaw in the File Download dialogue that allows remote attackers to misrepresent a file’s origin and mislead users into trusting unsafe downloads. The vulnerability has a CVSS-based high impact ...

CVE-2001-0722

The CVE concerns Internet Explorer versions 5.5 and 6.0, where a vulnerability allows remote attackers to read and modify the user’s cookies via Javascript executed in an about: URL. Affected software is Internet Explorer 5.5/6.0; the root cause and mechanics are described as the ability to acces...

CVE-2001-0722

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."...

CVE-2001-0722

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."...

CVE-2000-0722

The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...

CVE-1999-0722

The CVE-1999-0722 entry concerns Cobalt RaQ2 servers. The provided documents state that the default configuration allows remote users to install arbitrary software packages, indicating a permission/config issue in the default setup. No concrete exploit details, affected software versions, root ca...