93 matches found
CVE-2005-0727
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-0735
newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin...
CVE-2005-0735
The CVE refers to NewsScript’s newsscript.pl CGI, where an attacker can escalate privileges remotely by sending mode=admin. Affected product: NewsScript (NewsScript.co.uk). Root cause: incomplete access validation in the CGI parameters allowing admin rights to be set via the mode parameter. Impac...
CVE-2005-0727
CVE-2005-0727 is a duplicate of CVE-2005-0735. Connected sources detail a remote privilege-escalation in NewsScript (NewsScript.co.uk) via the CGI parameter mode; setting mode=admin bypasses authentication and allows the attacker to add, delete, or modify news content. This vulnerability affects ...
CVE-2004-0735
Buffer overflow in Medal of Honor 1 Allied Assault 1.11v9 and earlier, 2 Breakthrough 2.40b and earlier, and 3 Spearhead 2.15 and earlier, when playing on a Local Area Network LAN, allows remote attackers to execute arbitrary code via vectors such as 1 the getinfo query, 2 the connect packet, and...
CVE-2003-0735
CVE-2003-0735 affects phpWebSite 0.9.x and earlier, specifically the Calendar module. The root cause is insufficient input validation for calendar events, allowing SQL injection via user-controlled input (e.g., cal_template) and potentially enabling execution of arbitrary SQL with the PHPWebSite ...
CVE-2002-0735
Format string vulnerability in the logging function in C-Note Squid LDAP authentication module squidauthLDAP 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages...
CVE-2002-0735
CVE-2002-0735 affects the C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier. The issue is a format string vulnerability in the logging() function, allowing remote attackers to cause a denial of service and potentially execute arbitrary code by triggering log messages. No...
CVE-2001-0735
CVE-2001-0735 affects cfingerd 1.4.3 and earlier. The root cause is a buffer overflow in the code that reads configuration files when ALLOW_LINE_PARSING is enabled, allowing local users to execute arbitrary code via a long line in the .nofinger file. The vulnerability is local, requires no authen...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOWLINEPARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file...
CVE-2000-0735
Becky! Internet Mail client
CVE-1999-0735
CVE-1999-0735 affects KDE K-Mail, where local users can gain privileges via a symlink attack in temporary user directories. The connected documents reiterate this description but do not provide deeper technical details (e.g., affected versions, root cause specifics, exploit steps, or fixes). No r...