CVE-2008-0727

CVE-2008-0727 affects IBM Informix Dynamic Server (IDS) oninit.exe, with a boundary/buffer overflow when processing long credentials (password) or DBPATH in the sqlexec path. Vendors describe a stack overflow vulnerability that can allow remote code execution or, in some cases, DoS, potentially w...

IBM Informix Dynamic Server多个远程溢出漏洞

BUGTRAQ ID: 28198 CVECAN ID: CVE-2008-0727,CVE-2008-0949 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server默认监听于TCP 1526端口的oninit.exe进程在认证期间没有验证DBPATH变量和用户口令的长度，如果用户提供了超长的变量名或口令的话，就可以触发缓冲区溢出，导致执行任意指令。 IBM Informix Dynamic Server 9.x IBM Informix Dynamic Server 7.x IBM...

Oracle 9i XDB HTTP PASS Overflow (win32)

This module exploits a stack buffer overflow in the authorization code of the Oracle 9i HTTP XDB service. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the...

Oracle Database Server XML Database Buffer Overflow (CVE-2003-0727)

...

Oracle 9i XDB FTP UNLOCK Overflow (win32)

By passing an overly long token to the UNLOCK command, a stack based buffer overflow occurs. David Litchfield, has illustrated multiple vulnerabilities in the Oracle 9i XML Database XDB, during a seminar on "Variations in exploit methods between Linux and Windows" presented at the Blackhat...

oracle9i_xdb_http.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit ======================================================= This file is part of the Metasploit Framework and may be redistributed...

CVE-2005-0727

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-0727

CVE-2005-0727 is a duplicate of CVE-2005-0735. Connected sources detail a remote privilege-escalation in NewsScript (NewsScript.co.uk) via the CGI parameter mode; setting mode=admin bypasses authentication and allows the attacker to add, delete, or modify news content. This vulnerability affects ...

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as...

CVE-2003-0727

Multiple buffer overflows in the XML Database XDB functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions...

CVE-2003-0727

Multiple buffer overflows in the XML Database XDB functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions...

CVE-2003-0727

CVE-2003-0727 refers to multiple buffer overflows in the Oracle 9i Database Release 2 XML DB (XDB) functionality. Public references describe stack/buffer overflow conditions in Oracle 9i XDB services (HTTP and FTP) that can be triggered by long inputs to XDB commands, enabling local users to caus...

CVE-2002-0727

The Host function in Microsoft Office Web Components OWC 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method...

CVE-2002-0727

The CVE-2002-0727 entry concerns Microsoft Office Web Components (OWC) 2000 and 2002. The Host function is exposed in components marked as safe for scripting, enabling a remote attacker to execute arbitrary commands through the setTimeout method. This defines the vulnerable component/function and...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2000-0727

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters...

CVE-2000-0727

CVE-2000-0727 affects the xpdf PDF viewer client older than 0.91. The flaw: when handling embedded URLs, the client does not correctly launch a web browser, enabling an attacker to execute arbitrary commands via a URL containing shell metacharacters. NVD assigns a base CVSS v2.0 score of 7.6 (HIG...

CVE-1999-0727

CVE-1999-0727 affects the OpenBSD kernel, where a kernel leak could allow IPsec packets to be sent unencrypted. Documents confirm the root cause is a kernel leak in the OpenBSD kernel, with impact described as partial confidentiality (IPsec traffic could be exposed). The available sources do not ...